DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3b3fe04c1b977de1b1ee2fb501d51f49.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b3fe04c1b977de1b1ee2fb501d51f49.dll
Resource
win10v2004-20231222-en
Target
3b3fe04c1b977de1b1ee2fb501d51f49
Size
158KB
MD5
3b3fe04c1b977de1b1ee2fb501d51f49
SHA1
ddb9e118aaa77f71295f29864480fd0ff730c8d2
SHA256
93c1ddf3dd6814121d07c7606187b373d94148de44f2490404a3e6e47b5a56a0
SHA512
a5abe3df2d41b6a2680ff517b2c8128652f25efabb9d3b8ba688ea2ec41451d5de075119eed3b6636e6e0f0205b07817cf035865005fad1508a865466ab7775d
SSDEEP
1536:Yb5B0Y8rW7grpitsVMoncFuaHceNES9eVWZP9jeElpis7hEOCb7Z+pi:modrSYTVPcFPHceNuWP9LlppM7ZW
Checks for missing Authenticode signature.
resource |
---|
3b3fe04c1b977de1b1ee2fb501d51f49 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE