DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
61386112c1ddc988bc4ee6fb91e888ac.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
61386112c1ddc988bc4ee6fb91e888ac.dll
Resource
win10v2004-20231222-en
Target
61386112c1ddc988bc4ee6fb91e888ac
Size
116KB
MD5
61386112c1ddc988bc4ee6fb91e888ac
SHA1
5cabd06c71add146d96c6c6b7d0f50b5a3dbcc72
SHA256
bdcc18dbe6d41513b6b08765acd1cd03d0ff45aa7307b7aea79bfed1e287803c
SHA512
711375303c3ab70b138beca304076c856c2fac1e5a42a14f5cf7354e8ca97f9434cd3a6871733c064aea4117f0ec0c6ba507647e6cbfc8fa6ad9d3a5fb9fbb28
SSDEEP
1536:+BAvBqZ+Qid1iiQ2zDVmPCjsiUUtuKWNuB6Af:yAU+tKCjsiMKidW
Checks for missing Authenticode signature.
resource |
---|
61386112c1ddc988bc4ee6fb91e888ac |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE