DisableHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EnableHook
SetupShellHook
Static task
static1
Behavioral task
behavioral1
Sample
85195b25b0fbe22e11a3bb02e46d39f9bf764a21cd6da529a51185799c36e99c.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
85195b25b0fbe22e11a3bb02e46d39f9bf764a21cd6da529a51185799c36e99c.dll
Resource
win10v2004-20241007-en
Target
85195b25b0fbe22e11a3bb02e46d39f9bf764a21cd6da529a51185799c36e99c
Size
101KB
MD5
489470b05246e43846fb5891a85e4bf8
SHA1
a08462d778c73ac208f06dbc6a89713d74ea3e89
SHA256
85195b25b0fbe22e11a3bb02e46d39f9bf764a21cd6da529a51185799c36e99c
SHA512
f33d7c4b78d180251689b1c911738bec4611e0a36bfc141de637748b25d04402df99a7f925982ced7aada9968b6324730bcb9fe65e04075fb57d976ea0934ba3
SSDEEP
1536:yInn41Q6EM0q94AHHhjhvy+v1fwho8vVp40vcGLyyjnBza5kKkEJwbP41Z:SQDqTnhjhvyswRNvcrStaBpw7cZ
Checks for missing Authenticode signature.
resource |
---|
85195b25b0fbe22e11a3bb02e46d39f9bf764a21cd6da529a51185799c36e99c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
MessageBoxA
DisableHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EnableHook
SetupShellHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ