DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
11cd1ce8a4a86d082183cf85d083d86b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
11cd1ce8a4a86d082183cf85d083d86b.dll
Resource
win10v2004-20231215-en
Target
11cd1ce8a4a86d082183cf85d083d86b
Size
59KB
MD5
11cd1ce8a4a86d082183cf85d083d86b
SHA1
6e3ea67aa1545e361a98495c6b23fbe73deddc76
SHA256
a5bfa92675172a35c594e3d78462332ae9fcbbacb23c6e01b0beda7f4988ec89
SHA512
7b343b6d860386f8d2640439b72ea8f1d5e19af3086e229253e19475add008b1349f34f1d9603e204a359a60f74c2513da2edca90553a908c1648e2387822513
SSDEEP
1536:+IyaAIT5M1+RSWM5T51+oG03fLNhvUob1BT27:+INAIT1PM93fLTvUw1R27
Checks for missing Authenticode signature.
resource |
---|
11cd1ce8a4a86d082183cf85d083d86b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE