DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
fb298644c91fefdc373af73e0641f646ea68231638952b81af2098c24aab9993.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb298644c91fefdc373af73e0641f646ea68231638952b81af2098c24aab9993.dll
Resource
win10v2004-20241007-en
Target
fb298644c91fefdc373af73e0641f646ea68231638952b81af2098c24aab9993
Size
321KB
MD5
290b2db921e69f4db4d9459ffe7ded50
SHA1
bb59cecd788ae0651eda8b5401e85abd06dd9279
SHA256
fb298644c91fefdc373af73e0641f646ea68231638952b81af2098c24aab9993
SHA512
d9c87faed7b311a5dafa2b053c43e9458391d9fec49a68214fa74d289a5ab81f99341a1e86aeeeb21fd1a7c244d7d9efbfe7f6bcc47417807cd01a776801d1f3
SSDEEP
6144:n2r5wOMaprf8k7tzrL7z4F2Y0esrRmrB9h5U0VTicY9k2S/kNV2eAThEsPvyt:2vMsV7tHC2YpDL/ThEsyt
Checks for missing Authenticode signature.
resource |
---|
fb298644c91fefdc373af73e0641f646ea68231638952b81af2098c24aab9993 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
ConnectNamedPipe
ConvertThreadToFiber
CreateFiber
CreateFileA
CreateNamedPipeA
CreateThread
DeleteCriticalSection
DeleteFiber
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
SleepEx
SwitchToFiber
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WriteFile
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
malloc
realloc
signal
sprintf
strlen
strncmp
vfprintf
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ