DllRegisterServer
FbGIN678
Static task
static1
Behavioral task
behavioral1
Sample
lGmEQCgpfT.dll
Resource
win7-20240903-en
Target
lGmEQCgpfT.dll
Size
1.7MB
MD5
31b9b21a2d6867856f8d91068eceb706
SHA1
d1b3418bd7ea2e581ef06246ffa5c8753e598540
SHA256
44fc749f1e8069f218d721eb1adbc5958fd6cdb7a535f899cf6726d19dd40d7b
SHA512
63b6f7affca37869326f3ed3591be45a005dda9f86d4bb20d61c9f90097573d188d75ff9f8c0b5673319878af1c8d3bd5cbe7b086116461ebbbd451932286fdc
SSDEEP
24576:G1I+dAYANzGv4ZG6G6uH9tzcRkOVA1E549tuET/Gq5IXaQ/RZMv6XU5lirTQXkrg:GGy4J4t6M7iku0VKXamE5lmTYksxgrV
Checks for missing Authenticode signature.
resource |
---|
lGmEQCgpfT.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CloseHandle
GetLastError
GetCurrentDirectoryA
CreateActCtxA
ActivateActCtx
DeactivateActCtx
GetFileAttributesA
FindFirstFileA
FindNextFileA
SetFileAttributesA
ReleaseActCtx
GetCurrentThread
VirtualAlloc
GetCurrentProcess
DuplicateHandle
CreateMutexA
ReleaseMutex
WideCharToMultiByte
GetSystemTime
DllRegisterServer
FbGIN678
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ