DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4cb5e5d929b69f6605fe17cd2f9860b43cf01f9540aded2058cec5c2d386128d.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4cb5e5d929b69f6605fe17cd2f9860b43cf01f9540aded2058cec5c2d386128d.dll
Resource
win10v2004-20240802-en
Target
4cb5e5d929b69f6605fe17cd2f9860b43cf01f9540aded2058cec5c2d386128d
Size
11.4MB
MD5
4cc7f070b79c4a757d1542e0411574a2
SHA1
9463158dee562aec6b5272dca235500be75962ea
SHA256
4cb5e5d929b69f6605fe17cd2f9860b43cf01f9540aded2058cec5c2d386128d
SHA512
855118f461e17784abe33281a1535c1501857c5eb5111483c8f6252877d911e309239a726cb5d8879cea1c043b83ced427eb74ec1c5bba6f59f1ce571d095758
SSDEEP
196608:jiSd+XtK3H8rYAj24M/NNbo7Bqsi/5kjgBxEuYl7Vk6cZ3JGE0JdhRk8W42v:jEtKX8LYbo7wh5tBxSlG6chJGE0JxLvM
Checks for missing Authenticode signature.
resource |
---|
4cb5e5d929b69f6605fe17cd2f9860b43cf01f9540aded2058cec5c2d386128d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileW
CloseHandle
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
ord582
GetAdaptersInfo
WSAStartup
PathRemoveFileSpecA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ