DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
150563a59fe4fc2c0bd581c83218d8f7.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
150563a59fe4fc2c0bd581c83218d8f7.dll
Resource
win10v2004-20231215-en
Target
150563a59fe4fc2c0bd581c83218d8f7
Size
132KB
MD5
150563a59fe4fc2c0bd581c83218d8f7
SHA1
1b3e4fb7a88abaeba014c35485ff76fa7f81f36e
SHA256
ca811b6c33e74f9ea1077493376ea54cd2a18d3a2d467c6578f042f0b47805bf
SHA512
4c1f5058f4bd2a3551a539d373c08c03d2336a6eb43cea04b1d0481578988f78c87f70a59705a7040ecb3d5116ffbf2f2f0701517ff2311fa5a3d6d1f934cac3
SSDEEP
1536:C1MqHXnQowuS1Vuhnz5NBiFVCV+wLft1PuA0/WW:mr50gnz9iFNwLftAwW
Checks for missing Authenticode signature.
resource |
---|
150563a59fe4fc2c0bd581c83218d8f7 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE