DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0f1fafb0ee16f135cad2ac451d577a5d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f1fafb0ee16f135cad2ac451d577a5d.dll
Resource
win10v2004-20231215-en
Target
0f1fafb0ee16f135cad2ac451d577a5d
Size
167KB
MD5
0f1fafb0ee16f135cad2ac451d577a5d
SHA1
08b5a62ed3b75bb82f5e770b16808ebbc0e2b076
SHA256
67f1e18a4f0cf8d90aa8ffbbd91576e97d8cab7cee3dc74db3c6eb34b17afe17
SHA512
c17eade5d3654f00d7f8784eb3d8e888a132f87bec7226d5f309734d3de93d242913125295a753f013af3d2e02af928fcfe7013056216f504ded10e7fcc3d2e3
SSDEEP
1536:HC9cW7iEMH7scZuNq9KLylol7LVpgKCzheh9f4211W51ELdKB:HxW7iH5ZuNqQy+xLV6KCza9g21XK
Checks for missing Authenticode signature.
resource |
---|
0f1fafb0ee16f135cad2ac451d577a5d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE