DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0f4ff2543b26995cb18c2a743f582a7f.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f4ff2543b26995cb18c2a743f582a7f.dll
Resource
win10v2004-20231215-en
Target
0f4ff2543b26995cb18c2a743f582a7f
Size
86KB
MD5
0f4ff2543b26995cb18c2a743f582a7f
SHA1
2ce8cc8f60c1c71dd76c5405610abfdb6468a370
SHA256
d2c158bca1155660346fe40d305488b49b556529558b308d6013218d29e5fcb5
SHA512
3801c8c901efd35c626159f26d3e00974030bd8e746b2682e2bc6b2e85505a6dc93ed0dd73ef04a51485d606513938c6575fd0cda1fb44fc0ad3ee8659d463ed
SSDEEP
1536:Kd7oSj7V6Lqg044KltV/onlSg5DffCTw6/jAnbLiq4XeX3jcBxx2iQa:Kd7Nj7EiK5AMg1KTw6/CbGq4u6r1Qa
Checks for missing Authenticode signature.
resource |
---|
0f4ff2543b26995cb18c2a743f582a7f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE