DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0b48efbbd0ba15ad889b08178be92de3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b48efbbd0ba15ad889b08178be92de3.dll
Resource
win10v2004-20231215-en
Target
0b48efbbd0ba15ad889b08178be92de3
Size
88KB
MD5
0b48efbbd0ba15ad889b08178be92de3
SHA1
379cb35697c9dd0d7030d48fa738f26ba88287cd
SHA256
5322ccfcdf080cdd1ade20946ef9e4823c256cdde8c54ef4f3d1eb3b93ecd19a
SHA512
f3022eae478185d21e0bc15d131ea3b0a2942ea6ad172a049b180c4d7dd09b18fb419285eee1a5283d83e824daa43cd0193749d1a841d9ffbbb703e6e460a71b
SSDEEP
1536:cPL+Z4LLoe4+IRchuv4T7H18eujPonOaaqxQ7UVgkGuHzNtb9RyI2XwC7ZBDspsG:wL+ufo8W2uk7VbujPonOarxuUekbtb9l
Checks for missing Authenticode signature.
resource |
---|
0b48efbbd0ba15ad889b08178be92de3 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE