DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1c8b064e3d7ec26ff16b47dad818cc22.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c8b064e3d7ec26ff16b47dad818cc22.dll
Resource
win10v2004-20231215-en
Target
1c8b064e3d7ec26ff16b47dad818cc22
Size
82KB
MD5
1c8b064e3d7ec26ff16b47dad818cc22
SHA1
26f72b90d91535516bc56e23ebcdae6813b288be
SHA256
aa1d9dd18181c737cb639f325520584ea3bfdd5a806fea85dc881b10fa812140
SHA512
9c99c36ec4458fdf6e548b4e725e0e230f17d01b81d07763c35db9b42529177b9493f203958e1ffb31e2c8a5c640ca3214e528476188eee186123fe85fe1c892
SSDEEP
1536:At3eeuxEkc/QkA/GxH4m+Fagr7YH1LkzEvXDYWLBb2Osx4PrF5L7gCctLwzdHxHD:IuxEkKfdSagrM1LkANBsxw83cHdD
Checks for missing Authenticode signature.
resource |
---|
1c8b064e3d7ec26ff16b47dad818cc22 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE