DllRegisterServer
FbGIN678
Static task
static1
Behavioral task
behavioral1
Sample
23102024_0229_lGmEQCgpfT.dll
Resource
win7-20240903-en
Target
23102024_0229_lGmEQCgpfT.dll
Size
1.7MB
MD5
0be4f0b08900106ace1b187205e0c3f5
SHA1
eb2f4a0154598ebd8bb32b19a9833b9ab5654644
SHA256
f66aa16742f211e40b32c5e29a22ef3aeb5b942ce9bddcaeaecefb657d31d309
SHA512
4d75823e3b3f84675f8671488b425e646fb9f6dfdd80348909a0194332dee1232c7f69ee163d16cd444994567db49d693b8f1f42175c9083a9da33e143df39bd
SSDEEP
24576:qM1pDk23ZtiG6PTiHbZiItppePIXUSD+OdjpkmjwdOfV2u3LsqMSHWi09+4Ht7yE:qcpA6ZuKLewRDBBuofV20LsqM6WivOK
Checks for missing Authenticode signature.
resource |
---|
23102024_0229_lGmEQCgpfT.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CloseHandle
GetLastError
GetCurrentDirectoryA
CreateActCtxA
ActivateActCtx
DeactivateActCtx
GetFileAttributesA
FindFirstFileA
FindNextFileA
SetFileAttributesA
ReleaseActCtx
GetCurrentThread
VirtualAlloc
GetCurrentProcess
DuplicateHandle
CreateMutexA
ReleaseMutex
WideCharToMultiByte
GetSystemTime
DllRegisterServer
FbGIN678
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ