DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1fe1e671dadc9a63d7a4b6ebff6da719.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fe1e671dadc9a63d7a4b6ebff6da719.dll
Resource
win10v2004-20231215-en
Target
1fe1e671dadc9a63d7a4b6ebff6da719
Size
90KB
MD5
1fe1e671dadc9a63d7a4b6ebff6da719
SHA1
0312c418806caa10de062acb2873805127838617
SHA256
897e222e192a6235871764c8d3d41ddc404288edc4d1e479a8fc44ac83b1edbe
SHA512
ec9b468c6665bdc31a668e6603b2f9e6d84280139634b20bbaa050d610609570d35dce1993d56f9625ff776ccc8905b66a58d362afc9516abe7204e15a7fe77f
SSDEEP
1536:Rp68Y7l3bdcPdE3qI+O6+oXosUq68WkGoaKzw572BmHUjW3Y0Nnt0d8qA3lJeZXB:vZSbO2RPGosX68WkGoaKzgHHU630GVJS
Checks for missing Authenticode signature.
resource |
---|
1fe1e671dadc9a63d7a4b6ebff6da719 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE