DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
006ec0dc3b71948c386ecc11c8ffc633.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
006ec0dc3b71948c386ecc11c8ffc633.dll
Resource
win10v2004-20231215-en
Target
006ec0dc3b71948c386ecc11c8ffc633
Size
140KB
MD5
006ec0dc3b71948c386ecc11c8ffc633
SHA1
5d2fe32d254a92f9459faea76cfde3e78c550490
SHA256
2ea790221b42309d566772fdb4e84746b2b21d7bbf2c69042dfd81b0ab7e52dc
SHA512
b23d355693c5057e61f17e66bbd8b518d40bf5a2cf69bf0586c0895ad52379acfe072d44fcaedc615c0f5d9ca5ae0ed21bcb1a50749ddb83bab98de235d6c026
SSDEEP
1536:79Wc5ynzMz9FOAdzI0iOt+qRUzbROjTq/ZQF19i5sU58z:79Wayz29FOa8PDzbKRF1sH8
Checks for missing Authenticode signature.
resource |
---|
006ec0dc3b71948c386ecc11c8ffc633 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE