DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4f0c04e746390f21fa7bf7a3b8e174f0N.dll
Resource
win7-20240708-en
Target
4f0c04e746390f21fa7bf7a3b8e174f0N.exe
Size
148KB
MD5
4f0c04e746390f21fa7bf7a3b8e174f0
SHA1
5a1a07446db8b8deea2c7532261576a22089de70
SHA256
a5837ad6afc550fd839fe092e184f824b0361c50cb051da483a55c3e2aaa9a25
SHA512
6205779d51c5b1c6cf7bf6ca0966eb6a8b6689843627824595dd0680f43582878acfadde4d5657bbdb1a64e90f9c27f318f31c7a778d8035c256244acdb88a80
SSDEEP
3072:2S9DbS5Z65cc09UEShPTlwrhs5jq61M7cecapfdn2f:N9Db86589Ul7lwSXeDv2f
Checks for missing Authenticode signature.
resource |
---|
4f0c04e746390f21fa7bf7a3b8e174f0N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
RegDeleteValueA
SHGetFileInfoA
CoTaskMemAlloc
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE