DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0c8bda223c26995728a8963d1ee16b4e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c8bda223c26995728a8963d1ee16b4e.dll
Resource
win10v2004-20231215-en
Target
0c8bda223c26995728a8963d1ee16b4e
Size
88KB
MD5
0c8bda223c26995728a8963d1ee16b4e
SHA1
93fe61bb9065f0c1152ba39dcaf9a0ec474c7d0f
SHA256
07a016a938933c766757ec5323b324e3b2ff121a5ad2036aaac934c0fd3b3d60
SHA512
fd8b7660864e7e4a6dc7403845fdb23e00bfd1d440a4f88766880355f08ef71d17141ef41d3ccff923947df0bde768da6fc9008f555f2bbc42ab7130db280f70
SSDEEP
1536:rvjPaYYOaWdrDfcexxHdc+BjCtZFhCcG2BpUCi02QczJroOLuMze/NpxIshHS:rbPDjXffcWHlBWtThZBpU5oQuyefCshy
Checks for missing Authenticode signature.
resource |
---|
0c8bda223c26995728a8963d1ee16b4e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE