DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
79ceabdbcd633c73f73a364c40fa9600d5f30dedfc5ed14126e9692d578eca44.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
79ceabdbcd633c73f73a364c40fa9600d5f30dedfc5ed14126e9692d578eca44.dll
Resource
win10v2004-20240709-en
Target
79ceabdbcd633c73f73a364c40fa9600d5f30dedfc5ed14126e9692d578eca44
Size
226KB
MD5
0523eebf68c7252eb576e97e62d3cfde
SHA1
1a1b2daa88b6d0160322a148a2dafca200029c41
SHA256
79ceabdbcd633c73f73a364c40fa9600d5f30dedfc5ed14126e9692d578eca44
SHA512
bb38294f9f468538c3010e6c01687d3776e13653d08ffc759918578ea7f37d2d5e5bef90052f35fda9c63b0def1fa645a9b3585ef34f91a23f6ea6d85e59b29c
SSDEEP
3072:kP6cW/ty1Ef+QffbP5Tc2zHTFKG53hLpOfqJlxAsx/uM5ij3fVyFvu581B81s8cU:d/tzB22zHxB5RIfqJrzcL+BE
Checks for missing Authenticode signature.
resource |
---|
79ceabdbcd633c73f73a364c40fa9600d5f30dedfc5ed14126e9692d578eca44 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetFileVersionInfoA
inet_addr
ord1146
??1type_info@@UAE@XZ
GetClientRect
DeleteDC
ShellExecuteA
ImageList_ReplaceIcon
CoTaskMemFree
ord251
LoadRegTypeLi
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
ord117
ord82
Config_Refush
sndPlaySoundA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE