DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0ac9f3f9eed6e72e68f1158488389937.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ac9f3f9eed6e72e68f1158488389937.dll
Resource
win10v2004-20231215-en
Target
0ac9f3f9eed6e72e68f1158488389937
Size
91KB
MD5
0ac9f3f9eed6e72e68f1158488389937
SHA1
8467e55e4c54d39efd5195d5fa84189090b19121
SHA256
7a7d4cc79b18eea7a5ae0ecc823ea08004caa47f5aa992d894fe116f9e0c08b7
SHA512
1fbd3daf0eaa7660ddf1bcd6bfbd298751680a2a7da7f359794b9aef041f6f7035ae3ec6b4d65979e715a6e60bae032550d16a70f8c7a3228669c4b1e0bd6daa
SSDEEP
1536:reItZCZ0ASQvohqftnYUktCPLAdDSeMTiNTyiKSfD5WC+CNwQ8/p51RaYUH:RZCJSQ2U4GLuSeEiKCNiR51R+
Checks for missing Authenticode signature.
resource |
---|
0ac9f3f9eed6e72e68f1158488389937 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE