DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ef29c2390d0ca34b2bdc8e8bf0366803cbadaea2db6395d2338ff455621644be.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ef29c2390d0ca34b2bdc8e8bf0366803cbadaea2db6395d2338ff455621644be.dll
Resource
win10v2004-20240508-en
Target
ef29c2390d0ca34b2bdc8e8bf0366803cbadaea2db6395d2338ff455621644be
Size
5.5MB
MD5
8034d9943ec2b7a7e20eefbb313c5d85
SHA1
a2381b83e571608c01855d566211d0649e669fd6
SHA256
ef29c2390d0ca34b2bdc8e8bf0366803cbadaea2db6395d2338ff455621644be
SHA512
09a2ced491ed9398f7e6adbe95a0b8efe54ff5590ffd992946687814e9290f38014c57710acb0a445abddf4155f69229edfa95c92c21c27ba2bd40cf0cc14b1b
SSDEEP
98304:3DWScfqNX7Pwhku/lJ/RtA8ktR50fTUzPPp5Sn:TWScf9RPtA8ktR50fTsJon
Checks for missing Authenticode signature.
resource |
---|
ef29c2390d0ca34b2bdc8e8bf0366803cbadaea2db6395d2338ff455621644be |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE