DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bcb72fa9cf49257371b89e9d39e0bfafe3e82b6a1154a9ce064b06380993cff4.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bcb72fa9cf49257371b89e9d39e0bfafe3e82b6a1154a9ce064b06380993cff4.dll
Resource
win10v2004-20240802-en
Target
bcb72fa9cf49257371b89e9d39e0bfafe3e82b6a1154a9ce064b06380993cff4
Size
1.0MB
MD5
66c42ffe90f30d9e4284c7faeaa6b281
SHA1
93c39e887c7a5f90803cf5f6c795a580563c1938
SHA256
bcb72fa9cf49257371b89e9d39e0bfafe3e82b6a1154a9ce064b06380993cff4
SHA512
f2094ea1959ec8437a17731fab3b26fed6df193619fe67413d62990e9807b6890d89934d1df7634e11e96b13fef8f80eed9b3609b2d665c6d35e70b7b3d525e1
SSDEEP
24576:uMQlL6uFVF3Mf0GHwttfqSzso7cviBePHvIee8vzpF3nBiWr8ycu036:uXlL62V5Mf0GstfqSzdo6BePKmpx8Wrl
Checks for missing Authenticode signature.
resource |
---|
bcb72fa9cf49257371b89e9d39e0bfafe3e82b6a1154a9ce064b06380993cff4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
__vbaVarSub
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE