DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllVersion
UMonitor
WinLogoff
WinLogon
WinShutdown
Static task
static1
Behavioral task
behavioral1
Sample
1f458daf9b7f802b394fa515272e9253.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1f458daf9b7f802b394fa515272e9253.dll
Resource
win10v2004-20231215-en
Target
1f458daf9b7f802b394fa515272e9253
Size
220KB
MD5
1f458daf9b7f802b394fa515272e9253
SHA1
24ca2afc97e64c41e1d09607dad3e93dd1f30968
SHA256
c38a9ecfed5fcb2aa84851184554a096e007f9cc350920c45005c8d180351275
SHA512
89797a5faffad87be313de3704f4a9926db3e0cfdcbfe81db980e1e9515468acc6f0c858f71c76513db52cfd0080cd2b32a621ed70e6d29abc227e15c838aa39
SSDEEP
6144:MUX6t/I85pnpkHQ8I2f0nRVcyUVI+eFq+tD:Re75nd2ecyUVit
Checks for missing Authenticode signature.
resource |
---|
1f458daf9b7f802b394fa515272e9253 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllVersion
UMonitor
WinLogoff
WinLogon
WinShutdown
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE