DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
034320e06e2932f49906d3deddc9b741.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
034320e06e2932f49906d3deddc9b741.dll
Resource
win10v2004-20231215-en
Target
034320e06e2932f49906d3deddc9b741
Size
82KB
MD5
034320e06e2932f49906d3deddc9b741
SHA1
e3a462e332c64082ac820df34404a1f75f9cddd5
SHA256
43cb65a54767c9f72699ae6fb3b0b02fa708b51b6f01e0523a09876cd9bea115
SHA512
ff345e39f9d37e5a47ac6597e9d2ca9aec4479494586be98c63f6628c0ab01b92ed294d570c4b9bd459778b3352c51570b28d689b672bff69e7bf484e0c8cf28
SSDEEP
1536:ZvXsiZGUDBVpkAJt3l75s2b59nHlO0siVF2jZFs/PaE9aBgx8Lo9KCsgOsr3l7:Zv8iZGsBVRJt3l7+2zRVF2jZaSEEgqLG
Checks for missing Authenticode signature.
resource |
---|
034320e06e2932f49906d3deddc9b741 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE