DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0abd8cb8eaf19930d79d81ecbca4db60.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0abd8cb8eaf19930d79d81ecbca4db60.dll
Resource
win10v2004-20231215-en
Target
0abd8cb8eaf19930d79d81ecbca4db60
Size
158KB
MD5
0abd8cb8eaf19930d79d81ecbca4db60
SHA1
2969806a572fdbc844aff2ffea315457310eafc1
SHA256
76a9d92dc81f4a3bf85d423fae40e105a0cc59dbefba9e8e22a0d3ed32414be6
SHA512
329742da2c4e9d6e012636dd14558f1d562467cb4e790f09a06d1f3bfb43ba520829d78ec3695ed0d2b325b738218d42a51e6edfdf07b2b9bf5a03cb204bfb2c
SSDEEP
3072:vWBDRL2BVJGAfVeWszUbt//B8xd9OKS/Vr:vWv/A0la//B6ir
Checks for missing Authenticode signature.
resource |
---|
0abd8cb8eaf19930d79d81ecbca4db60 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE