DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0cc50e5cbd9d8217b6e915507fb6242e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cc50e5cbd9d8217b6e915507fb6242e.dll
Resource
win10v2004-20231215-en
Target
0cc50e5cbd9d8217b6e915507fb6242e
Size
137KB
MD5
0cc50e5cbd9d8217b6e915507fb6242e
SHA1
2221349b768b180c3c96a4d9c62144f8da3944fb
SHA256
b1a2d68e20770cc11c3b6d11dec3a9caeb9d36860637b939f5c73f5d3c25185b
SHA512
d0d7390ac46512e8100e01b0f66f96bc0d80a1d10723cc501baed4104116d0cf58c23ddbd88068edd34050c5bc886db85ab525116e65167b1f681c6a5695ff09
SSDEEP
1536:131KsO23FFmakHcKayxVuamEA1auajBdHE1uP0L1XpabrSMqvy:13vOk+4yzmv1auydHE1uE1X0bWy
Checks for missing Authenticode signature.
resource |
---|
0cc50e5cbd9d8217b6e915507fb6242e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE