DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0f042bb610dad2d0c70a9d712af28b67.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f042bb610dad2d0c70a9d712af28b67.dll
Resource
win10v2004-20231215-en
Target
0f042bb610dad2d0c70a9d712af28b67
Size
158KB
MD5
0f042bb610dad2d0c70a9d712af28b67
SHA1
48064730e793418dcec7689fac3436c77dd8f48e
SHA256
ae2548963ecb10ecd2836f3cbff668939365e5ed9aab5176161a86b7da2d56ad
SHA512
b50f78760f2cec88f8d62e9692c6e3c33b511b0ec6ee5aa863eb82bd1c4b4bd6e2aa8ee6a60c7f0fa8c4b3ab323057b017e12730f816b914b1008e405cf0ea0f
SSDEEP
1536:Y9bRrl+Hd/FPofNx4r4iSvJ1CkYyIDccRn9dfa+b0V9RPT98EhqTF:YFRp+fQFwtSDCkpII2bdKJT9XUh
Checks for missing Authenticode signature.
resource |
---|
0f042bb610dad2d0c70a9d712af28b67 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE