DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
11cb1b6217b9f692e7bf65f5b1171999.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11cb1b6217b9f692e7bf65f5b1171999.dll
Resource
win10v2004-20231215-en
Target
11cb1b6217b9f692e7bf65f5b1171999
Size
86KB
MD5
11cb1b6217b9f692e7bf65f5b1171999
SHA1
e2cad246c58daf427884c11ab2aefab4f6f879f2
SHA256
da51f459dd008dd6fcb62ecdc7fe2b7c033fcdced47526c516804a4c4adeb7d8
SHA512
088d0861179ce9637be289f02e185b0070bc37abaaf7363618ce38fb2d9a6c7aa6831891f4eadadeb66d22579070c48dee01495b96ffe8fd2a982e92346d70f4
SSDEEP
1536:iJ0ZgcldlQ1/kbt+XSnrsduqDcg3NwZMAMndt2jSKsQF8gRdBafbUq1F/rS:SCgcPi1/kx+ina7aVMErsQFe44lG
Checks for missing Authenticode signature.
resource |
---|
11cb1b6217b9f692e7bf65f5b1171999 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE