DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0fe23fb35c3aa4f0e76f2d7de750e71e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0fe23fb35c3aa4f0e76f2d7de750e71e.dll
Resource
win10v2004-20231215-en
Target
0fe23fb35c3aa4f0e76f2d7de750e71e
Size
158KB
MD5
0fe23fb35c3aa4f0e76f2d7de750e71e
SHA1
77aea485fdb8a958793da4acba3a33623885c96f
SHA256
2e17bf83a07a8d900ae4a347bb67e3eda5f6c9ed050fab3152199eb1c89c3b5c
SHA512
b2f8073c4b83da5a1581b7f897e6acc5860faac04c69540402eadc4d003b032eb0b8508dd659eb3453fb273f8f7f6702e1034c8119634e58c605c9edec5ef247
SSDEEP
1536:LQ8Ds+ZSoHd6nnI/JF+cS8Fq9KvElPKMNFmweXtrB32Fzy9n2PMMt:k8A+ZSoEnqqcSEqsY/Fmwe9rB79n6Bt
Checks for missing Authenticode signature.
resource |
---|
0fe23fb35c3aa4f0e76f2d7de750e71e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE