DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
01171f824a9af96fc9e5f2e178ce70bc.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01171f824a9af96fc9e5f2e178ce70bc.dll
Resource
win10v2004-20231215-en
Target
01171f824a9af96fc9e5f2e178ce70bc
Size
59KB
MD5
01171f824a9af96fc9e5f2e178ce70bc
SHA1
b72248c0085db0e099fdca5be072e41f56f66bc1
SHA256
5514e6f0cab1a3a695f04e92f9e1d6e7e7ba353c92bc0281f20c029f02abc77e
SHA512
d0418d8622d386c79900b6211e112bb2d994a999234c748d7f1a201ace374e08eaab7341be48a3403c386a8f4f5acf0866747c8dbe4e30416f002635daa95136
SSDEEP
1536:UIyPXvWqaFzcT1qXzPDtfKUeA8eJKWJtjV8:UIMWq2u1qXzxfKqhJK6X8
Checks for missing Authenticode signature.
resource |
---|
01171f824a9af96fc9e5f2e178ce70bc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE