DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
9fb95b9c8e6001cdd04103845f2e5400N.dll
Resource
win7-20240729-en
Target
9fb95b9c8e6001cdd04103845f2e5400N
Size
1.0MB
MD5
9fb95b9c8e6001cdd04103845f2e5400
SHA1
897cbd82019f432e324985c126bab3a9e9c73434
SHA256
d604393c250a57f1b94edbf384f5dbcea72e9fbc6563b0444d5b35c9b7fd3ac3
SHA512
f998ed0c44b13f4192afc125a7335ce507475277135056438feaf90cf53467fb59d5c5f548e197d0e108dacbd9678c5941adc98735ef2dcd7620395e3ab7be53
SSDEEP
24576:peWDEepmkGHsJ/XfvGM2l0v9Z8zpMoVtKO:0WN0HC3tZX8zppfJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9fb95b9c8e6001cdd04103845f2e5400N |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE