DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
87ca89f2cb1fd80372cc8c8fed227d9634311d1f322c9f5f3e411ad48be3f5e2.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
87ca89f2cb1fd80372cc8c8fed227d9634311d1f322c9f5f3e411ad48be3f5e2.dll
Resource
win10v2004-20240426-en
Target
87ca89f2cb1fd80372cc8c8fed227d9634311d1f322c9f5f3e411ad48be3f5e2
Size
80KB
MD5
10c9c3fa7bbcf0ede4b5c20406168cc3
SHA1
850fe748a595cba9527c0eed0df1c5f4d0ed602b
SHA256
87ca89f2cb1fd80372cc8c8fed227d9634311d1f322c9f5f3e411ad48be3f5e2
SHA512
5a2fbf5afac78b1cdc574675e187d17000e251e69e89a5b54134ec72bfabf985d22d8c47d8523c85e390b64a8067c63a9c8c266115b76336881a60eca3bfe64e
SSDEEP
768:UVfDQzu1L4B/hLr+Dv9V25pPcbxCpfoQooL:YfcZ425qwfA
Checks for missing Authenticode signature.
resource |
---|
87ca89f2cb1fd80372cc8c8fed227d9634311d1f322c9f5f3e411ad48be3f5e2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MethCallEngine
ord660
ord553
ord557
ord300
ord595
ord598
ord305
ord306
ord520
EVENT_SINK_AddRef
ord560
ord561
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord313
ord712
ord714
ord608
ord681
ord685
ord101
ord102
ord103
ord104
ord105
ord545
ord546
ord581
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ