DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
fa2ebd6dbcd722fab9c956b498902fe1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fa2ebd6dbcd722fab9c956b498902fe1.dll
Resource
win10v2004-20231222-en
Target
fa2ebd6dbcd722fab9c956b498902fe1
Size
120KB
MD5
fa2ebd6dbcd722fab9c956b498902fe1
SHA1
e2e607ccd55e868b89c604b467692175310d35a7
SHA256
883d2f00e726688b9677eac1fd208e3679b25a8aa0801e1cd39481521839b388
SHA512
678cdb33eaa1d9db1e895096ade27b33b799e13a89538283ff900381de8fc1d4fdf1308042588e2c6c12c87a42c0c2756bade170341c166c571098f0ec7ecbbe
SSDEEP
768:Xy5q4QGnoI2PHJdvrGFT72G3qnZ/lJzgr9rqQD+AfqkQwEANiBqCXpyN:i5q4QctGTe7O/PUrrD+Sq+gqCXpyN
Checks for missing Authenticode signature.
resource |
---|
fa2ebd6dbcd722fab9c956b498902fe1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE