DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0c2af0f86765817bf6482bc1a2fbacaf.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c2af0f86765817bf6482bc1a2fbacaf.dll
Resource
win10v2004-20231215-en
Target
0c2af0f86765817bf6482bc1a2fbacaf
Size
88KB
MD5
0c2af0f86765817bf6482bc1a2fbacaf
SHA1
15e21af3a4578a1932f622cc7be344cff6cd1106
SHA256
f87687289a2616ffe83cdc5d57f1a9290d5c8ebaa9fffec341753c81078876d3
SHA512
512b57ec3aee293aae3a2101826a93a0a2a7e0b323583a58faf05ed9a4279419249679305dd398b97d7e65e902474c167cfd024c5293608bb8576e71d5c91ef0
SSDEEP
1536:E+vedWds5LeTGBHSZQ6U6m+DjPUIvCxKyFkydQs3J9VRrJx10qrZ7OZ4:E+vedWdjTGhSZJU6mEvCMyCLs3LDrVTL
Checks for missing Authenticode signature.
resource |
---|
0c2af0f86765817bf6482bc1a2fbacaf |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE