Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
116298353ab1c605b35b7613d675c0aa.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
116298353ab1c605b35b7613d675c0aa.dll
Resource
win10v2004-20231215-en
Target
116298353ab1c605b35b7613d675c0aa
Size
31KB
MD5
116298353ab1c605b35b7613d675c0aa
SHA1
c95e7f437eb9a168341cd29e2153d3484cbd1726
SHA256
2a3c45988d6eca1327932164d84e77af8854179d032049405d933d3f6bec60b9
SHA512
3cc12532320cdf82204b4cbb79ba9c13e33ed9f276cfd6474abd8a625fe16a6370fc39dc32f96a9811b251f3af29d6f6ee9a086065d020131e093bf49eda0079
SSDEEP
768:fFe+Wqy1szsbuOCJkMXf+R5C4osXQVY1NH:f4hqy1s8C24f+9sY1J
Checks for missing Authenticode signature.
resource |
---|
116298353ab1c605b35b7613d675c0aa |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ