DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
1159ea783ae66f5d2bc11af3676b8772.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1159ea783ae66f5d2bc11af3676b8772.dll
Resource
win10v2004-20231215-en
Target
1159ea783ae66f5d2bc11af3676b8772
Size
120KB
MD5
1159ea783ae66f5d2bc11af3676b8772
SHA1
beb62d89d1674212a314d4cda8ef3e3596f245a2
SHA256
ca866e31ec88c76ccec1b3ed74b52fa228234ae9c71f5a4005a6469e25404231
SHA512
c89cf1be54da4f6c2e0c35c2c3b2db66cd3b2831dde78322b1cafc0bc4d2dfadaec99a22b0e87b35579a08f9f1f791bddf304ba8c1555efe9b142b40d75773d8
SSDEEP
1536:ZhqqQFDf6MmbFmWImx6Ay15WnNQYEM6ss1uq:ViDfUoDm4A5nNQ1T
Checks for missing Authenticode signature.
resource |
---|
1159ea783ae66f5d2bc11af3676b8772 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE