DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
0131612306ebcfbb4610b8e5b0ed02f9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0131612306ebcfbb4610b8e5b0ed02f9.dll
Resource
win10v2004-20231215-en
Target
0131612306ebcfbb4610b8e5b0ed02f9
Size
19KB
MD5
0131612306ebcfbb4610b8e5b0ed02f9
SHA1
4be8b4eabd601a5137aacf4d89248877e969c91b
SHA256
ae87ff65851c5bae63c3ac07170c6d8362e65372c8ed895c03f7efd6f16a1308
SHA512
8ae6e7f1c89ddbd64960520b64038768f775f60ce66b2dc855d46bcc6eab7106e9e1bfe2625e2e64f13f5ecdb23267b42d8e53d53dc99c861feb7333368fef33
SSDEEP
384:yWWTEcWjd55SolrDwjWUMC66EXtfilI49UsSMhRVfaefRC0EpKhp0pl:ZZros4WUB66EdqRUsSGRVSefg0CT
Checks for missing Authenticode signature.
resource |
---|
0131612306ebcfbb4610b8e5b0ed02f9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE