DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1fd63cb54fced75181ef845196bfbed1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fd63cb54fced75181ef845196bfbed1.dll
Resource
win10v2004-20231215-en
Target
1fd63cb54fced75181ef845196bfbed1
Size
167KB
MD5
1fd63cb54fced75181ef845196bfbed1
SHA1
b5cc5b39c0680d696b354ca11c56bbabc9fbc6ee
SHA256
2f1a5afd564f2a6b173de7e499d3b29a8b0ab9eec220397c37478a17715caf8b
SHA512
6488d140b1b960ce8004011533b70712ac48429a3ef9e0ac4dcafd7c80c4077382eadc3f412a7009be358d8a3f0d06b16504571743f08d76d8dbe99f29aa3877
SSDEEP
3072:wJTeMn6CIeqHHvposX68WkGoaKzgHHU63gUBbcrrGfC:wJTeMn63eqnxtGFKcxcrr8C
Checks for missing Authenticode signature.
resource |
---|
1fd63cb54fced75181ef845196bfbed1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE