DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1ef7ab8eeb8c5982353c2c31cbd5afaa.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ef7ab8eeb8c5982353c2c31cbd5afaa.dll
Resource
win10v2004-20231215-en
Target
1ef7ab8eeb8c5982353c2c31cbd5afaa
Size
88KB
MD5
1ef7ab8eeb8c5982353c2c31cbd5afaa
SHA1
4a536e8294d1680d21c67bff2f1e5a269f7885ac
SHA256
2fa4336d9fae0c2ce4a7c9dc12d9f5c25d63f1f7f2a1aa880c772629f09f8f73
SHA512
915ca88c54bab0aaed8fb5ed8832eef26fe4a8ee616b9e783e03b8404a3d0c77029fd98256789ff237f91d0a1d62c471baafce3a4e953c3fea017e0d2a8cabe7
SSDEEP
1536:TdrjVEJMM3EBphtMhSpaxxgkY5qU/2+b3Q0xqkDXqAVL5D3A1yR03ZMu:9e3EBp/YrY5NbQuRVe1J
Checks for missing Authenticode signature.
resource |
---|
1ef7ab8eeb8c5982353c2c31cbd5afaa |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE