DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
513bde9cf2f67cb44fe7f1bdefd1d40b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
513bde9cf2f67cb44fe7f1bdefd1d40b.dll
Resource
win10v2004-20231215-en
Target
513bde9cf2f67cb44fe7f1bdefd1d40b
Size
116KB
MD5
513bde9cf2f67cb44fe7f1bdefd1d40b
SHA1
4fd46879fc11f05547cb39ab97ac97c4872f642e
SHA256
d488d9828eac79a9bf9adf1c4a5ba0fb622bd28fb7d328fb23096c5fca942eca
SHA512
84a9c3ccbf3ed9a4e4cf0e6a53dafd1e7c074b39c7652bdfa3a1ef17d55577948a50de4aa4d68346d8e808830f40df9d3182128ca75f8cfd8ef2bce6eb34b00f
SSDEEP
768:/nzQoiSUqZOXQnSrovwCOCu2lqWfmw/1F/+w+AzfNlSyEA0fOt5EMlj4u81Sq9c:/nzQvFqZWQBbHxewdZlSyEcxq9c
Checks for missing Authenticode signature.
resource |
---|
513bde9cf2f67cb44fe7f1bdefd1d40b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE