DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
49d377f4b789dce781ba72e723da21a12d5e4f3d87ab8122a01f731aa2dcbf5a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
49d377f4b789dce781ba72e723da21a12d5e4f3d87ab8122a01f731aa2dcbf5a.dll
Resource
win10v2004-20240508-en
Target
49d377f4b789dce781ba72e723da21a12d5e4f3d87ab8122a01f731aa2dcbf5a
Size
25KB
MD5
95c498c03f0eb9f25ccc42de16cde898
SHA1
4c1d890fec215df68d74af7db079156ff9358849
SHA256
49d377f4b789dce781ba72e723da21a12d5e4f3d87ab8122a01f731aa2dcbf5a
SHA512
1965b06df92e64b4fc8ffd3d04ca517fd8373f3cdfe3327e369a705fd20097ed8e5793e1bd0f054dcfe446430e85b5cc41d35850d62ace09a013a9539073ef1f
SSDEEP
384:/0VyhHXQPLArnHEXQoDw46driLLNLLpBJaP80yrfU9bxBovVz:/FXQzADEjDwjriLRLlBJa00QfU9xKvV
Checks for missing Authenticode signature.
resource |
---|
49d377f4b789dce781ba72e723da21a12d5e4f3d87ab8122a01f731aa2dcbf5a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord2097
ord2909
ord4713
ord4715
ord4627
ord3579
ord4165
ord4719
ord4703
ord5053
ord2617
ord2754
ord2843
ord3945
ord2744
ord2845
ord2620
ord2696
ord2960
ord3345
ord3346
ord3340
ord2694
ord3580
ord4096
ord3906
ord3192
ord721
ord504
ord731
ord5630
ord1075
ord1035
ord1097
ord1085
ord729
ord1647
ord265
ord5748
ord5637
ord2894
ord5638
ord3952
ord2860
ord2916
ord3202
ord651
ord403
ord1073
ord1084
ord4046
ord4141
ord4302
ord4462
ord4681
ord3859
ord4312
ord4450
ord4176
ord2199
ord5360
ord3578
ord1539
ord3890
ord4657
ord2086
ord4608
ord5644
ord3837
ord4700
ord3314
ord4296
ord3919
ord2323
ord1785
ord5649
ord3268
ord4510
ord1494
ord4677
ord2140
ord1850
ord4691
ord2861
ord4099
ord3907
ord654
ord406
ord1986
ord5200
ord2548
ord1633
ord3738
ord2176
ord2358
ord5070
ord3431
ord965
ord1464
ord4973
ord881
ord3827
ord4154
ord4113
ord5023
ord1873
ord4314
ord4375
ord5001
ord3611
ord4133
ord4132
ord4124
ord2389
ord4024
ord3997
ord4070
ord4441
ord4380
ord4385
ord4390
ord4122
ord4156
ord4473
ord4127
ord4117
ord3838
ord4241
ord4123
ord4111
ord4110
ord4505
ord4060
ord3854
ord3844
ord3840
ord4202
ord4204
ord4201
ord3892
ord4079
ord4459
ord3898
ord4444
ord4432
ord2177
ord2963
ord4015
ord5363
ord1540
ord5643
ord4704
ord3922
ord2618
ord2755
ord2844
ord3946
ord2851
ord2621
ord2695
ord3581
ord4098
ord5160
ord632
ord3452
ord381
ord5123
ord5124
ord279
ord5568
ord4736
ord4740
ord4724
ord2223
ord2378
ord4403
ord570
ord315
ord3530
ord5341
ord2635
ord4223
ord2451
ord2510
ord4219
ord4228
ord4230
ord2081
ord3112
ord3158
ord2115
ord3185
ord5648
ord3458
ord2197
ord2234
ord3963
ord2135
ord1043
ord1071
ord4360
ord733
ord269
ord1370
ord5681
ord1367
ord1046
ord328
ord1042
ord1369
ord999
ord1000
ord711
ord671
ord1105
ord988
__CxxFrameHandler
??1type_info@@UAE@XZ
_adj_fdiv_r
_EH_prolog
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
LocalAlloc
LocalFree
GetVersion
GlobalFree
GlobalAlloc
Sleep
GetClientRect
GetDC
ReleaseDC
FillRect
EnableWindow
Ellipse
LoadRegTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ