DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
Static task
static1
Behavioral task
behavioral1
Sample
418541857fdbac27dcafb5f1be266ae9a5c35c3f69ea64e8af14e996c12a53cd.dll
Resource
win10v2004-20240508-en
Target
418541857fdbac27dcafb5f1be266ae9a5c35c3f69ea64e8af14e996c12a53cd
Size
96KB
MD5
14b6593b7fccd7eb33e3abc23c1f362c
SHA1
750e811324238a582b4b76f929af593101a6d1de
SHA256
418541857fdbac27dcafb5f1be266ae9a5c35c3f69ea64e8af14e996c12a53cd
SHA512
b02fe19367e3b1bea50ddddc01739d5bde4c16503c6ee041d64c3dfb7e5378f2f9a20e463c03c49808746bcbc0704eced39fc064de3f6e1c8c06f7a6eb45cd9f
SSDEEP
1536:FFCLtN2pRudECjdZZ/goqj48n7yEYhUrD3QhpA7HdqZLSwPMUU+v8TJGim:rmtNcu6CBPoM87bMUD3sGu8+v8TJG
Checks for missing Authenticode signature.
Processes:
resource |
---|
418541857fdbac27dcafb5f1be266ae9a5c35c3f69ea64e8af14e996c12a53cd |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
OpenEventLogA
ReadEventLogA
RegCloseKey
RegDeleteKeyA
RegGetValueA
RegisterEventSourceA
CloseHandle
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EscapeCommFunction
FlushConsoleInputBuffer
GetCommModemStatus
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileType
GetHandleInformation
GetLargestConsoleWindowSize
GetLastError
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
OpenEventA
PurgeComm
QueryPerformanceCounter
ReadConsoleW
SetCommBreak
SetCommMask
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
lstrlenA
_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
malloc
realloc
strlen
strncmp
vfprintf
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ