DllInstall
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
98c613cd3d67402a04c850f4460af7f1e1fbd9ef5e1fa2b3e28104b87aabcea8.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
98c613cd3d67402a04c850f4460af7f1e1fbd9ef5e1fa2b3e28104b87aabcea8.dll
Resource
win10v2004-20240508-en
Target
98c613cd3d67402a04c850f4460af7f1e1fbd9ef5e1fa2b3e28104b87aabcea8
Size
5.8MB
MD5
76830711c49cbbb6f008c5f159a038d9
SHA1
7d46b19cbf22a9087ff6c7e41e9ec00bd59b3f40
SHA256
98c613cd3d67402a04c850f4460af7f1e1fbd9ef5e1fa2b3e28104b87aabcea8
SHA512
04211e989d6078f5b2693908355b2bbdbc6dc2d6cada804f8a45c8c25fb537b6854fd3aaa70a45cc5d8a759739d643bae95cd05166a04296d8db5448dbaa1d1f
SSDEEP
98304:cYuxaP4Hn8SWF52HCYMCW25ZtpkVIE7xJLptHtb00SGOx:721DMoHqITBYFUGA
Checks for missing Authenticode signature.
resource |
---|
98c613cd3d67402a04c850f4460af7f1e1fbd9ef5e1fa2b3e28104b87aabcea8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CloseHandle
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetAsyncKeyState
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
CryptAcquireContextA
CoCreateInstance
SystemTimeToVariantTime
SHCreateStreamOnFileEx
CM_Get_Device_IDA
mciSendStringW
WTSSendMessageW
DllInstall
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ