CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
PealLogoff
RealLogon
Setup
Static task
static1
Behavioral task
behavioral1
Sample
cd1d11c06d8de77b4e1f4eeb936dda4e6ffe8b0febc1ecc7abceef3f206244beN.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cd1d11c06d8de77b4e1f4eeb936dda4e6ffe8b0febc1ecc7abceef3f206244beN.dll
Resource
win10v2004-20240910-en
Target
cd1d11c06d8de77b4e1f4eeb936dda4e6ffe8b0febc1ecc7abceef3f206244beN
Size
276KB
MD5
0139010754d0a39065141c16af88f730
SHA1
5e68c15d3df5388b3fb9a1565e6adbb69b21323c
SHA256
cd1d11c06d8de77b4e1f4eeb936dda4e6ffe8b0febc1ecc7abceef3f206244be
SHA512
dcb0e96fc5c3b85daac4b06b0cf15b2fff73d92270bac95a4ba947482ca5e2252ebf96455613fa8cc00fe9547c05a5532915b01c8cc950bcfc8e17a651394199
SSDEEP
6144:ZFHl9vqK0ggfkaWl5DQ5s4EKHMBV+LTsV0aqJWIa:ZFHrSKmfNWlRk8KY4LwuPJM
Checks for missing Authenticode signature.
resource |
---|
cd1d11c06d8de77b4e1f4eeb936dda4e6ffe8b0febc1ecc7abceef3f206244beN |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EndPaint
EnableScrollBar
EnableMenuItem
CreateIconFromResource
CreateCursor
CloseWindow
LoadResource
lstrcpynA
lstrcmpiA
lstrcatA
TlsSetValue
TlsAlloc
SleepEx
EnumResourceNamesA
GetFileSize
LocalAlloc
MapViewOfFile
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
PealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ