DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
12e447911e8d2c0ebb1eae277b9bd502.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
12e447911e8d2c0ebb1eae277b9bd502.dll
Resource
win10v2004-20231215-en
Target
12e447911e8d2c0ebb1eae277b9bd502
Size
90KB
MD5
12e447911e8d2c0ebb1eae277b9bd502
SHA1
fb2ba6029edd90344a23d52ab363416c0346557a
SHA256
be9869f324ff92eb5e8ff515d85ab333a268995f0ddac1937f0496a6825c83fc
SHA512
e40f646871d111ec06ca45b3e328505513517c59774e32ace7d8a095d72ab13eb85d967121c5ac777751c64fc873cdaa8640e38af5797fe94af2711352798361
SSDEEP
1536:9DqPWSQYVWOVjLx4gu1qCkIn8w1hJOM2kQRLmO4i2asLL5xV5P8dbt11qM:1WQYVJ6gu8nInthJXIRC7iSLFxkd38M
Checks for missing Authenticode signature.
resource |
---|
12e447911e8d2c0ebb1eae277b9bd502 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE