DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadHookOff
LoadHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2a0df7c63d30966f47b1b6005ac69ff9.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2a0df7c63d30966f47b1b6005ac69ff9.dll
Resource
win10v2004-20231215-en
Target
2a0df7c63d30966f47b1b6005ac69ff9
Size
19KB
MD5
2a0df7c63d30966f47b1b6005ac69ff9
SHA1
1dff843597049b7b8321ea9bcaf54ecdf37b700d
SHA256
77c5b1970f775f2a66a9b71f09dd8288919697900dda7d25042dd6c919403e6e
SHA512
d3f09ba4155abb6e0af2c56e04e88973addb5a3689f420c2c88fcab6a20aa3b27dcde5bc32eef9da570aa26cac959f004581b53fcf4a86f42f1c449f2a722a60
SSDEEP
384:2GSvfzmiQgEyfwSXcM7t2l3PXu3t3RGOYhT5mOHPIrLD2khA86odTd2UKY:2DHSiQghfwG50l/+93QhTzHO9CojJ
Checks for missing Authenticode signature.
resource |
---|
2a0df7c63d30966f47b1b6005ac69ff9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadHookOff
LoadHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE