DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1fbf0e69132da00d9f05dd3d822e1aed.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fbf0e69132da00d9f05dd3d822e1aed.dll
Resource
win10v2004-20231215-en
Target
1fbf0e69132da00d9f05dd3d822e1aed
Size
86KB
MD5
1fbf0e69132da00d9f05dd3d822e1aed
SHA1
8628df1f4900cd1d4b4f4285c4a7689f5d87d757
SHA256
fa949314e05a0615fa241259a812e1165bf36879d6f4bb3ff3dad4651157bdb2
SHA512
b8c49b855ff549887af2dce7539c0a992b12e693a8510ef0150018ee903682ace3431ba7bb52289e86b469748b64909ca81fe3e0fdac0d67af8fba4573f27134
SSDEEP
1536:IRg4hK5TEGHSW6lDiwZlxykSb6ScicmHd5Tp6Mv+BdLimGlWdf0BHTzYvjQwHFB7:n4hK5TEGynPZry1Os9pp60+BkmGYdcBY
Checks for missing Authenticode signature.
resource |
---|
1fbf0e69132da00d9f05dd3d822e1aed |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE