DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
01ecb5e778d386dbf56b03adc82230a0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01ecb5e778d386dbf56b03adc82230a0.dll
Resource
win10v2004-20231222-en
Target
01ecb5e778d386dbf56b03adc82230a0
Size
116KB
MD5
01ecb5e778d386dbf56b03adc82230a0
SHA1
09e5b16633ff53cb2db1a1953cb2beeee4cde6f0
SHA256
cb71b8d01f7702718ee303b8f169059ba7877c57ccb1c6abb140caa3d08c1c3c
SHA512
7d3ba659363439bebcb3451b937feda03b68859232fb4875d0da090ce9a64c9c90c604fd5a2c3e6b019c8f7801cb041f8a59620b104cdca1808055aa450cd24f
SSDEEP
768:mPJXFQoiRqZOxQqSyoJoChjLs4l4I5jmQP/gCRWHJd0WFQpOKDzfpMalPpB59xHa:mBVQvRqZEQ1TNRrmpGOKvBzhB595ohD
Checks for missing Authenticode signature.
resource |
---|
01ecb5e778d386dbf56b03adc82230a0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE