DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadHookOff
LoadHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0b7d999da986861d3ed6134dcdc5ac24.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b7d999da986861d3ed6134dcdc5ac24.dll
Resource
win10v2004-20231215-en
Target
0b7d999da986861d3ed6134dcdc5ac24
Size
17KB
MD5
0b7d999da986861d3ed6134dcdc5ac24
SHA1
d2b863a283f9e0dd76ea3a58b247ab9e833acc24
SHA256
e3c894eff50e59a2e0c786b62cdec754ed90e907a93936254b9ca77c81fe007c
SHA512
282d900388ea3c5eb5fc81d110ebfbf7683cc560c6ce9429af34b9f588fa8a3fdf48a4523e30b14cb5d9fee4770067c35137da8e731e9bd680d0f69353c28023
SSDEEP
384:azijamSjvlhY1cmVJ00G0iEQdQNpHJfuD8dT8r0OI9:7jamuS1Pa0rjNppfQ0OC
Checks for missing Authenticode signature.
resource |
---|
0b7d999da986861d3ed6134dcdc5ac24 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadHookOff
LoadHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE