DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0fb480e26647c708b622b990952af76e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0fb480e26647c708b622b990952af76e.dll
Resource
win10v2004-20231222-en
Target
0fb480e26647c708b622b990952af76e
Size
79KB
MD5
0fb480e26647c708b622b990952af76e
SHA1
7de756e2b283c652e03f2b47b9dc1ee7a4e50f84
SHA256
5e70e080c8374411c4c32f2c4f57fdc85c17ea6c089dc99075d3a0074a5f7216
SHA512
ef728358f12e055725adf74eb45673432ec1ddbac01e1d178412d02a30503fcc57efeed7a3f2aab670a4cf3281657106dd23c100f1e82228463f2f69c6970da3
SSDEEP
1536:0xrXKvAAbvmIzK6Lzn6ZiSCiAUkJjWq+/+O9lqfeuXs6AE4KJrxFFfH+9kVx+5S:0+vmR6v6ZJAVJC/befsMx9H6kAS
Checks for missing Authenticode signature.
resource |
---|
0fb480e26647c708b622b990952af76e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE