DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2338938f620d3f6e6c4cedba5a5bdaeb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2338938f620d3f6e6c4cedba5a5bdaeb.dll
Resource
win10v2004-20231222-en
Target
2338938f620d3f6e6c4cedba5a5bdaeb
Size
90KB
MD5
2338938f620d3f6e6c4cedba5a5bdaeb
SHA1
5e07a562c977b7ef19e86dd7b5cfb24a5697145e
SHA256
54b1f27afae73ea4cf1d4c4b97d41a062fd867509bcc6f53050b7c1a85f47cb6
SHA512
7edab48245dd6822405221d5555d678782b3922e58e15f25fd970864d2ca5a6ff4d086e7a13580f5cf29b61d0d5132402a9f2b7b4d50dbd6231af72334865027
SSDEEP
1536:Ea9pdovSlzTJitzddRm2vzwo1/YnQ9J1+mENYbTx4JEXArl9l9j+0MRsFjKYRm2M:EMdKSlAK2sY/YnU1ENkTx4gSj5MRsBUT
Checks for missing Authenticode signature.
resource |
---|
2338938f620d3f6e6c4cedba5a5bdaeb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE