DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1113877bf1d0d71d5dd1676c6c69e3ef.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1113877bf1d0d71d5dd1676c6c69e3ef.dll
Resource
win10v2004-20231222-en
Target
1113877bf1d0d71d5dd1676c6c69e3ef
Size
82KB
MD5
1113877bf1d0d71d5dd1676c6c69e3ef
SHA1
ff55c1c62430f6c5c035aa81b11c7416c2cd4dc9
SHA256
04ed6e73872ffda728fe339dba1316f793451e4a026e6fe45fc2baaa47e3d384
SHA512
85af2d076e19d0ae37c1d317d7d4e2a2a32a5c4f28d7ea025751d8d4a5da3870d1edd9305de514727a1ca56180530e75fff4ab4ab671f543c82de06293070f10
SSDEEP
1536:P4cAiepyajgIvkcz0DW7MdEFztCkLZIfjToHYOz7pq2id7+2M3iCVUPpu2w/:VA9pdj1/3oXkLejToHYOEPhDP82A
Checks for missing Authenticode signature.
resource |
---|
1113877bf1d0d71d5dd1676c6c69e3ef |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE