DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
11d84fee88430b0f4b420208b698d580.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11d84fee88430b0f4b420208b698d580.dll
Resource
win10v2004-20231215-en
Target
11d84fee88430b0f4b420208b698d580
Size
158KB
MD5
11d84fee88430b0f4b420208b698d580
SHA1
48adfd4be408a7c1e5b2a094be579513e07b3b3c
SHA256
34ffe8262186301ca76d979389a5397412b07ff5aa70113bf34825c73044a047
SHA512
5b9a18e1884a9029e75143de418f5852a90a851227a76065800a911f2b28c06a4ee2ba312c842959a0f3a2d8aad1574ea4b10546d0e71be6e9db2391b6b38804
SSDEEP
1536:B4yU+03sZR52rhjEN3cpdzXtFCahyuOoUeBV/78seOmd9UWB3Rcwbdz:B4yU+osZURENWNXXrUezA5Rdb3pN
Checks for missing Authenticode signature.
resource |
---|
11d84fee88430b0f4b420208b698d580 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE