bukeni
jzrundll
jzrundll2
Static task
static1
Behavioral task
behavioral1
Sample
34f9eb2c34be6d62cd5ab85d3a7262a9bd21128daa743398514747bdf85e917d.dll
Resource
win7-20230712-en
Target
34f9eb2c34be6d62cd5ab85d3a7262a9bd21128daa743398514747bdf85e917d
Size
66KB
MD5
199730b2835bce2bf108f7ab13763cd0
SHA1
1846cdf6fa56036313c5d73d79ccae0d423340a3
SHA256
34f9eb2c34be6d62cd5ab85d3a7262a9bd21128daa743398514747bdf85e917d
SHA512
6c88913b5ce2c921dc0236154a7373da05fe86bc9e94883948d99d4637773f620bfcde789a85c2a8186f806e315d733e7979fe6a28cf8992bcd0135c2d99f202
SSDEEP
1536:Ju+dRnhRdz8kYB+6ok0ZspFXR05R25mceFeDLSp:JDn1z81t/0gpRkRvVx
Checks for missing Authenticode signature.
resource |
---|
34f9eb2c34be6d62cd5ab85d3a7262a9bd21128daa743398514747bdf85e917d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wsprintfA
RegSetValueExA
SHGetSpecialFolderPathA
InternetOpenA
PathFileExistsA
bukeni
jzrundll
jzrundll2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE