DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
2bb3fc5fa1c391258fe852f76d82e450N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2bb3fc5fa1c391258fe852f76d82e450N.dll
Resource
win10v2004-20240704-en
Target
2bb3fc5fa1c391258fe852f76d82e450N.exe
Size
107KB
MD5
2bb3fc5fa1c391258fe852f76d82e450
SHA1
7cb1c2cc347e03231ba2eb7d26786dbf94a24f38
SHA256
35b135ce8cfef8b83174bd25d1e7ee9ed826ff7fa01d98b7e5c060f76a86fc55
SHA512
ced6d8b90d30130882feab927c3877fb37da92a35d62c0f5eec504c224f6baac363dd42a42cf41bcf7a31263aa559e72119f65893eeb7aab767e764e6b86b3d4
SSDEEP
768:IxSmDmD1742hD7aHNoDcF97EGEe98dKmiGZr6VO3/C0m:kmZ74aD7Ux98k+6VO3q0m
Checks for missing Authenticode signature.
resource |
---|
2bb3fc5fa1c391258fe852f76d82e450N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
WindowsCreateString
WindowsGetStringRawBuffer
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrW
QueryPerformanceCounter
QueryPerformanceFrequency
_vsnprintf
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen
wcscmp
wcslen
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ