DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JpHookOff
JpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
21c17b68d8be9a27620ce1368d2dae6f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21c17b68d8be9a27620ce1368d2dae6f.dll
Resource
win10v2004-20231215-en
Target
21c17b68d8be9a27620ce1368d2dae6f
Size
80KB
MD5
21c17b68d8be9a27620ce1368d2dae6f
SHA1
d92f0a7d7ff54d08d66b541af95b0d0b2cb3f743
SHA256
88e1bfb47261141c91ce14007340f92209168bb6297caef10f9a1d5a11cba39a
SHA512
424d912ab16e901b394366559705c2b4901b116466115be2c5e7dd7813ad2cf38c6a2b507c747c2d6af68f3d9a08691fd8fabc988c9e499da81ccec3040294d7
SSDEEP
1536:qM7BuTE3mT7BAEI0gkrMKZGzJKw0tPrXTi450vvAAHImDAaOelxtlkGsdwd8j3eZ:PBwE3U7yipGzyXyvNoXaOIxtlkGwwG2
Checks for missing Authenticode signature.
resource |
---|
21c17b68d8be9a27620ce1368d2dae6f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JpHookOff
JpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE