DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
03caa3c0c52a64fc5e649c91dbb24695.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03caa3c0c52a64fc5e649c91dbb24695.dll
Resource
win10v2004-20231215-en
Target
03caa3c0c52a64fc5e649c91dbb24695
Size
140KB
MD5
03caa3c0c52a64fc5e649c91dbb24695
SHA1
ab652f2ebf200889bac4235de9972aabc3fcb320
SHA256
6927971f188440e1db64139faafae263e35ec7fa32aeb7225680d14ec12af566
SHA512
51562d544964e7e38dde4a9a3ee16b7cb76fc9b86020d62dce5ca04520393c0a11eb85f4be07524ee1de7e8dab14f518b87fdc80e37565421821a9448b18c1bf
SSDEEP
1536:vsOidmxyubIcanJ/moNestfycQkDBzyWx4ehc3Ys1zTy9ZAn:vsfdmgManJ/v1acQkDBzy64l3Ty0n
Checks for missing Authenticode signature.
resource |
---|
03caa3c0c52a64fc5e649c91dbb24695 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE