DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0a8375dac0e8734cee29cb306ac0cc3e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a8375dac0e8734cee29cb306ac0cc3e.dll
Resource
win10v2004-20231215-en
Target
0a8375dac0e8734cee29cb306ac0cc3e
Size
140KB
MD5
0a8375dac0e8734cee29cb306ac0cc3e
SHA1
87f271651c8d470a466102b50e1cba04d93b7e02
SHA256
370ae70ebfa07f725bc0d78397cb5f7cb635b3b996f73cd807f21a07c776a5a4
SHA512
180828439f5b01bb9345969ae64014b813d6c93938202b0e91997d5eab721d692e0cf1336a0f40b44f8b20816b6b6f13a7364ea2fda94a63e329a0e0643832dc
SSDEEP
1536:inBqWrQwV4BFCh0qI+KbUfVy4J8CPUlWkP92V3sdntZNQDW1EQ5v+q:IOwWO0N6V76Wk14M5v
Checks for missing Authenticode signature.
resource |
---|
0a8375dac0e8734cee29cb306ac0cc3e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE