DllCanUnloadNow
DllGetClassObject
Daigmlg
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
549a5cb4ff9c359ff4b37ed51903adfb902c792eaa4db587f1d0722b5794095aN.dll
Resource
win7-20240903-en
Target
549a5cb4ff9c359ff4b37ed51903adfb902c792eaa4db587f1d0722b5794095aN.exe
Size
216KB
MD5
eb192febde325959de94f4c11cb492a0
SHA1
ccc7b6d4c50720472da036244da15152a352efa4
SHA256
549a5cb4ff9c359ff4b37ed51903adfb902c792eaa4db587f1d0722b5794095a
SHA512
67f23ea94d112ee96817c127b22ead0842368c8401ef938bba1c70fe8c026ee6936837850dbbeb49f2c2edec52def88d766de49d27499c123aa4b0e7b89241ee
SSDEEP
6144:Rhrl1NWPLfVYF3xqEhNR7mYd+Y2oSsOgv:VjWjVymYotoSs5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
549a5cb4ff9c359ff4b37ed51903adfb902c792eaa4db587f1d0722b5794095aN.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Daigmlg
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE