DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
211ba922a9efbef82f0f557f7d2d4d11.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
211ba922a9efbef82f0f557f7d2d4d11.dll
Resource
win10v2004-20231222-en
Target
211ba922a9efbef82f0f557f7d2d4d11
Size
120KB
MD5
211ba922a9efbef82f0f557f7d2d4d11
SHA1
efc963070e398ac4144bf7e5c47a05bb7bb23929
SHA256
c1b57b6ddb15716155c5792068b6281822d37c1e0b20d6fd79b9618374e539c3
SHA512
069340fc546300a25cf887557c22dea0a00982c8f21e40a1a1eebb9b3c62080e3742be1a535332657edff809a4fdce584155dad11f7fd35c501fdbbfa723d2c7
SSDEEP
1536:wlqcQf8EVmtoAap73Q+jZsVsiuxnf2j1DezyM:Ow8Eyrap8YsVfuxfY1iGM
Checks for missing Authenticode signature.
resource |
---|
211ba922a9efbef82f0f557f7d2d4d11 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE