DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0ca8f2800520504ca5e69a0ba8861df9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ca8f2800520504ca5e69a0ba8861df9.dll
Resource
win10v2004-20231215-en
Target
0ca8f2800520504ca5e69a0ba8861df9
Size
86KB
MD5
0ca8f2800520504ca5e69a0ba8861df9
SHA1
dadc270f09a6031b18948088d8df0f7bf23a0356
SHA256
24e35091890cf5153c85e6500bf83059bb6c9e8240284a0bcf4eb94c708f4bff
SHA512
32f4d4ba19bdb77131651ba07a22c2944d8e070aa3bef3a0076949b675c9976d77d1b9c4913b343605200ea38d27e5d85ef73bd26700c0f5f10f71b9d8248845
SSDEEP
1536:0yvinIJkRcshkfYsKraAWWbf+tUlXeFtsz4rbaZo5lXoUn/Bn8xg5iWqUzSSYPPJ:0/fynXKrt9mtUkFtszUbt//B8xd9wwl7
Checks for missing Authenticode signature.
resource |
---|
0ca8f2800520504ca5e69a0ba8861df9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE