DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1247fd45df69d6b889c73f0b9ad7ebbf.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1247fd45df69d6b889c73f0b9ad7ebbf.dll
Resource
win10v2004-20231215-en
Target
1247fd45df69d6b889c73f0b9ad7ebbf
Size
158KB
MD5
1247fd45df69d6b889c73f0b9ad7ebbf
SHA1
b8b1b04e0ae9180c6cf52aa2f9b29ad8d0b7afea
SHA256
96f11a3edea16ca479f76d21cea7b9894a015a17248ac78025c0849ff6b5a607
SHA512
10d7e1c7273b1d85f2731b685738fcdf568f94b3c8adbebba58a87af45269637ad78d1c063af2354c0de4d300ebed102ea526100443684d015c817af78a388b1
SSDEEP
1536:mtsONCRhU+Q3qh7k6Vsz4rbaZo5lXoUn/Bn8xg5iWqUSKPPFJ9ZV5f5K:mt1IRh4cszUbt//B8xd9279Zjf5
Checks for missing Authenticode signature.
resource |
---|
1247fd45df69d6b889c73f0b9ad7ebbf |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE