DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0c0b67bd6ddcab5fa67a8a12ff2c76ee.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c0b67bd6ddcab5fa67a8a12ff2c76ee.dll
Resource
win10v2004-20231222-en
Target
0c0b67bd6ddcab5fa67a8a12ff2c76ee
Size
140KB
MD5
0c0b67bd6ddcab5fa67a8a12ff2c76ee
SHA1
f84ac927456cbfceff933c1cfe68d1f93a16efb3
SHA256
5bf3019af988c073f0258594c77ca99360bf4e3763d85395a9ec75a9fd74b81e
SHA512
ab0cdbd0fc45db95c8c50e9450b0d17a862d6b671c21cec34384e3bebca96ae268d7a01d45b80cf8e21f1a8265e99ace0f588051f6a71bd5f36afda5c854251b
SSDEEP
1536:YMM3+PVyTjkYc1RDh7EVIb//jsSH+fMZt0GuF6ZoMm6bzNvpLfwWLvjB:YMM3uMTjGh78IzISHS56GMplpDL
Checks for missing Authenticode signature.
resource |
---|
0c0b67bd6ddcab5fa67a8a12ff2c76ee |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE