DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2079d594b8618db70e70522d3fdd7b72.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2079d594b8618db70e70522d3fdd7b72.dll
Resource
win10v2004-20231215-en
Target
2079d594b8618db70e70522d3fdd7b72
Size
66KB
MD5
2079d594b8618db70e70522d3fdd7b72
SHA1
9f678475de0bc2747f58e5436754dbefed829f19
SHA256
4e9ba863d7ad75ca4d0245434a347d10a249b28b409d241241f1305719831f5b
SHA512
8d9eacdc901dec0fdfde7cb10d4fac3c9e637923fcd98d955c4fcc0d17959d53e71c59f0a97b4b590827d2ea03ded15b25fef05addc9d2f83343c93b55e600e4
SSDEEP
768:0KqpXXBS65dntu2DKGQXldMR12B0SxLRdzaHlA7OwYC9dMfJHRlH3iFJj4XFe42w:0tH8wxQXWmR05wYp3EJjvxlIKQh
Checks for missing Authenticode signature.
resource |
---|
2079d594b8618db70e70522d3fdd7b72 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE