CC_RQHandler
DllRegisterServer
DllUnregisterServer
HY_RQHandler
Static task
static1
Behavioral task
behavioral1
Sample
f1d8c13b9d7c899de709cf261cb79f8b6c9a5818a38303871f35d45ec382a1ffN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f1d8c13b9d7c899de709cf261cb79f8b6c9a5818a38303871f35d45ec382a1ffN.dll
Resource
win10v2004-20240802-en
Target
f1d8c13b9d7c899de709cf261cb79f8b6c9a5818a38303871f35d45ec382a1ffN
Size
96KB
MD5
2094a4fcf0bba4d7fbdba183073eed60
SHA1
4e24018502e8e3e9be71704520d059c7540102b6
SHA256
f1d8c13b9d7c899de709cf261cb79f8b6c9a5818a38303871f35d45ec382a1ff
SHA512
3c2d200a797815ae8857c63f5686fec9e242f345a1a0d1077d5817575a32bb7fcaf0584c4ef8db4722e691109636d4b85d6d73dd38ca0ed77df87522b2ad2f63
SSDEEP
1536:U8mlSJY1mjayS4bUUiOIJs7XRtZLbhFIXhd:aS4AbUUiS9tZLj+hd
Checks for missing Authenticode signature.
resource |
---|
f1d8c13b9d7c899de709cf261cb79f8b6c9a5818a38303871f35d45ec382a1ffN |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReadFile
lstrlenA
GetTempPathA
GetTempFileNameA
CreateFileA
lstrcpynA
SetFilePointer
GetLastError
lstrcpyA
GetModuleFileNameA
CloseHandle
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegOpenKeyExA
??3@YAXPAX@Z
malloc
memmove
_adjust_fdiv
__CxxFrameHandler
_initterm
realloc
free
??2@YAPAXI@Z
CC_RQHandler
DllRegisterServer
DllUnregisterServer
HY_RQHandler
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ