DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1f2ed9028ea72e8cf7474ac5432d0e8d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f2ed9028ea72e8cf7474ac5432d0e8d.dll
Resource
win10v2004-20231222-en
Target
1f2ed9028ea72e8cf7474ac5432d0e8d
Size
68KB
MD5
1f2ed9028ea72e8cf7474ac5432d0e8d
SHA1
f8303d9da7ce311f7f1afaa9a4eca6b08e93f935
SHA256
7451f210e09bc1da8d30e8c724bc29ffa28bad9bc8e4a1489190f075cf76f637
SHA512
b0c3d12d835e040373792289aceb691a3cb3d7d8956cfaf328faa1c74854e8f691cda288ff5940d8f77f38f5220e6b1df47ed53700cfd75d6c7d33d8b4e89721
SSDEEP
1536:GS7/MLGfIto/GMCRp6qwR7/Xu1BFFq/4TNn02PH71634vO:GSzdUQGQqwFPCSCnFPbsI
Checks for missing Authenticode signature.
resource |
---|
1f2ed9028ea72e8cf7474ac5432d0e8d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE