DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
29dddd5e7d805d4f089f77965abaaca8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29dddd5e7d805d4f089f77965abaaca8.dll
Resource
win10v2004-20231215-en
Target
29dddd5e7d805d4f089f77965abaaca8
Size
120KB
MD5
29dddd5e7d805d4f089f77965abaaca8
SHA1
57643c665d8650cd113c6a3beb7c6cbdcbfbfc52
SHA256
faca4e7f1e8051ca2f01708ef4baa6e82fdc51f0451ce81979a376fed077cc17
SHA512
a426d58e88c83667fdc184747ce9c92bdcd8de801e709beb9ee27b2b1a179cf50f6ae993c6f486bf8b5ac1900ef3761881356452e99fd14fab06535bda790217
SSDEEP
1536:NKOqIQVfzT1MEJy9cKhkQXs3VP8ESnT5NP1beq:h8fN0AnP8ESnNtBX
Checks for missing Authenticode signature.
resource |
---|
29dddd5e7d805d4f089f77965abaaca8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE