ClearAutoLogon
DllCanUnloadNow
DllGetClassObject
NetAccessWizard
NetPlacesWizardDoModal
SHDisconnectNetDrives
UsersRunDllW
Static task
static1
Behavioral task
behavioral1
Sample
1264bb47a1d1ec4d6fae193f1fcfefb46aa268090e88718a2f9f42b830cfb4d1.dll
Resource
win7-20241010-en
Target
1264bb47a1d1ec4d6fae193f1fcfefb46aa268090e88718a2f9f42b830cfb4d1
Size
656KB
MD5
1c8173fa2438ffec53246a0fa7a3eb64
SHA1
82ea924767787f06c73ee345853f05d1a6b55b1f
SHA256
1264bb47a1d1ec4d6fae193f1fcfefb46aa268090e88718a2f9f42b830cfb4d1
SHA512
5f8ef3e4c4f3c61c7acd192c769beccd7890e54d1b923ea0d574a59ce0732a48f6f0fab4d869bdde84621ee5d217afa67fc4da697b9163996951577d771b7b47
SSDEEP
6144:og12AzW5HsiScvtNybiR8g0ISTFCRVe9/JE+++sKS1JGWWsca65eu9K2zqc4CWAZ:o82AK5HOEksJ1YW7DwzqyQ
Checks for missing Authenticode signature.
resource |
---|
1264bb47a1d1ec4d6fae193f1fcfefb46aa268090e88718a2f9f42b830cfb4d1 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegRestoreKeyA
GetConsoleCP
GetExitCodeProcess
GetCommState
GetModuleHandleA
ShowOwnedPopups
SetFocus
GetUrlCacheEntryInfoExA
ClearAutoLogon
DllCanUnloadNow
DllGetClassObject
NetAccessWizard
NetPlacesWizardDoModal
SHDisconnectNetDrives
UsersRunDllW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ