DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
20178f366c0790f3a98f155a66ee9db0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20178f366c0790f3a98f155a66ee9db0.dll
Resource
win10v2004-20231222-en
Target
20178f366c0790f3a98f155a66ee9db0
Size
21KB
MD5
20178f366c0790f3a98f155a66ee9db0
SHA1
e76a514a009246608ba5dd8e6babebc92401deda
SHA256
88f541f5a264eac1682990b6c29dd74d3690b1f049a03456b0e17f5e418c765f
SHA512
1c92c50e80336bfab251be77adbb87383dfe828ba5685ef5174c07c300c6265bf7075d7fbb6683fbdb2184af05eacdda879ffd6ebb014cb568344c6daf2fee1b
SSDEEP
384:1c2vDt4MW7LifMpaz9sSF8i6qvcstqLqBNbAZtqi/kBsIw+Znk4Vq838GyEyybVl:i2B4MnJsSFmqkIquBNbotqios9+pTVqM
Checks for missing Authenticode signature.
resource |
---|
20178f366c0790f3a98f155a66ee9db0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE