DllRegisterServer
YAeJyEAYL7F4eDck6YUaf
fmFkmnQYB5TC2Sq5NGFkK
nrDjhnkd9nedaQwcCY
Static task
static1
Behavioral task
behavioral1
Sample
5df1f68ac981886f3177a416f1071d101f7132e272f791a0e9a5e62ba377c009N.dll
Resource
win7-20240903-en
Target
5df1f68ac981886f3177a416f1071d101f7132e272f791a0e9a5e62ba377c009N.exe
Size
763KB
MD5
83d9abc740b8672a7fb312b2d1e3ac10
SHA1
250fab3fce56a7e4725bf15b2975fc7906129bda
SHA256
5df1f68ac981886f3177a416f1071d101f7132e272f791a0e9a5e62ba377c009
SHA512
fa1a8bd49bb6632e32663b0d601b9f1a0e0c7ab13f8458d37fe76c85cd5afd36c657b4592c30f9d9916a288dd2ddf5567e58a29b58b71d1c7e9111da1d61e2a4
SSDEEP
12288:9YQ56uUa4e8oAWzvqQ+fpnkDo0T5iWry2NDwLwsN0Cxy:9r56uB5PAWbG70T5iW2mcLwsN0Cx
Checks for missing Authenticode signature.
Processes:
resource |
---|
5df1f68ac981886f3177a416f1071d101f7132e272f791a0e9a5e62ba377c009N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CoTaskMemAlloc
CoTaskMemFree
CoLoadLibrary
QueryPerformanceCounter
CreateFileW
ReadConsoleW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
WideCharToMultiByte
GetLocaleInfoEx
MultiByteToWideChar
GetStringTypeW
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetLastError
HeapFree
InitializeCriticalSectionAndSpinCount
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetProcessHeap
GetFileType
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
HeapReAlloc
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
SetStdHandle
WriteConsoleW
DllRegisterServer
YAeJyEAYL7F4eDck6YUaf
fmFkmnQYB5TC2Sq5NGFkK
nrDjhnkd9nedaQwcCY
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ