DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1362789305995d21a53f9b7051387008.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1362789305995d21a53f9b7051387008.dll
Resource
win10v2004-20231215-en
Target
1362789305995d21a53f9b7051387008
Size
90KB
MD5
1362789305995d21a53f9b7051387008
SHA1
97cce58ad0003e2be6fbc8aea49ec703f598975d
SHA256
d7d2a909b63f65e81ca36c236edc4b0fc809a706cda8de6553cf45897ad39bfa
SHA512
25bb833d60d2d16db103977e3d27b16e49fa1f9f7519e8cebb6a650c626052658592bfc524663b9fcb8c81ff7de14edbdb8ba595ed612bd3378d4ffe94f0a264
SSDEEP
1536:BYDW1YK9uPkRAlsQGEBM8aW7T8Ooc0MRic4Hl/HC/Pbgzq4lDtUP91BM8Q:BYDU9uhlXlBcM8Z+Ac4Hl/HC/POq4lgg
Checks for missing Authenticode signature.
resource |
---|
1362789305995d21a53f9b7051387008 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE