DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0cc57b80cfa9fcc98f2361d2444208c1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cc57b80cfa9fcc98f2361d2444208c1.dll
Resource
win10v2004-20231215-en
Target
0cc57b80cfa9fcc98f2361d2444208c1
Size
86KB
MD5
0cc57b80cfa9fcc98f2361d2444208c1
SHA1
599844199a62c5f009ac28a8c7e10af1083ad316
SHA256
52b8aaab939eec198bc88afffaf577392efbdb711720f565126c6e3d9758ec0a
SHA512
1fb6558ab999ed0f6150f772be7177de87efead80ba8c65197109ff6c230018ada1b59670eb3574b5e7e9c914963411a049b8b3070c4b72eae77708af7ecfffe
SSDEEP
1536:ojLlYjc2n/bYRsgO61cRlsz4rbaZo5lXoUn/Bn8xg5iWqUxV4kQoh6/VipIS8JH:ojRjFmszUbt//B8xd9obhhpB8JH
Checks for missing Authenticode signature.
resource |
---|
0cc57b80cfa9fcc98f2361d2444208c1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE