DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
0c2a0175349b3356668a02766315804e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c2a0175349b3356668a02766315804e.dll
Resource
win10v2004-20231222-en
Target
0c2a0175349b3356668a02766315804e
Size
128KB
MD5
0c2a0175349b3356668a02766315804e
SHA1
ee776249eaf4829412c54686ad388a44a2bdfa27
SHA256
8626d5da056b30f7f93e8c07c045609cd7ac4c439504e48196fe7387f58e6e1e
SHA512
e4bcb6464e33f5e0c817e26e72223606b1d3fa1dc0bb856375ebe4dfad9859e1de93971f17fb2c9d8aa89c73f8fbc97fb780bb75bb23acfc6db31f2420c799ec
SSDEEP
1536:8JqYQw0QByS5A8i2li95fpFv7ezKMTlCkPm3T:+BbYS5A/2iT4lC5D
Checks for missing Authenticode signature.
resource |
---|
0c2a0175349b3356668a02766315804e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE