?InjectDll@@YAHPAUHWND__@@@Z
?UnmapDll@@YAHPAUHWND__@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
aa12556a4af0a651ea688dd5d36ae239eb0c4cec44adb50e6e6dc7ce3d9d2365.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa12556a4af0a651ea688dd5d36ae239eb0c4cec44adb50e6e6dc7ce3d9d2365.dll
Resource
win10v2004-20240802-en
Target
aa12556a4af0a651ea688dd5d36ae239eb0c4cec44adb50e6e6dc7ce3d9d2365
Size
654KB
MD5
12df18f0db890a7c6d14a376af82bc82
SHA1
b11af341483ab1b06be10fcbde8c0caf5c022749
SHA256
aa12556a4af0a651ea688dd5d36ae239eb0c4cec44adb50e6e6dc7ce3d9d2365
SHA512
7f32e4f09c4ce5782c543a8138fbeb95cf6d2ddee68a457e6030d65c92567576da4e821555b15aab308e369f5d4bbac8b5269507a45a36e8a29d74023fa563c1
SSDEEP
12288:yLtPKalEsddSvw58Wsb+iTEm6QD9K4MWj8Tzo7hIyQLNtJhK2+:Wi8lfTGPwHQDQ4MUsChIXLHHT
Checks for missing Authenticode signature.
resource |
---|
aa12556a4af0a651ea688dd5d36ae239eb0c4cec44adb50e6e6dc7ce3d9d2365 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnhandledExceptionFilter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UnhookWindowsHookEx
?InjectDll@@YAHPAUHWND__@@@Z
?UnmapDll@@YAHPAUHWND__@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ