DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0815a52ff4cd310146351cd8aad81be9.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0815a52ff4cd310146351cd8aad81be9.dll
Resource
win10v2004-20231222-en
Target
0815a52ff4cd310146351cd8aad81be9
Size
86KB
MD5
0815a52ff4cd310146351cd8aad81be9
SHA1
030bdebef33bf1006542d0a8974f3e56f7358df0
SHA256
85526bd544629a50bd742c1a719672edf8a641ef8b9059a5d9c08425a17109a5
SHA512
810af25be11a1975d51f829ec3d69b07d67113bb1e3092ff17c41bda7cb1f5cbbffca4367136a7fbdb26ffc5808bff0af22202591f804cd141304fa175673125
SSDEEP
1536:LibZIfLvF88IFQ/HF8AFtQRxASM/drUg0zGrZPaRPKXShP+0Wd/XHGgugtX/jrCc:QZID2Q/HFBDMaSWdf0gZaRPKihKdrLw8
Checks for missing Authenticode signature.
resource |
---|
0815a52ff4cd310146351cd8aad81be9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE