DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
28dcbf3fe39e261e65bed75f175361ce.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28dcbf3fe39e261e65bed75f175361ce.dll
Resource
win10v2004-20231215-en
Target
28dcbf3fe39e261e65bed75f175361ce
Size
158KB
MD5
28dcbf3fe39e261e65bed75f175361ce
SHA1
0704f8ba9b3e0129faf0b7f498bbf7ce646603ac
SHA256
98a0c19c9cf48c994f0d5acec83a7dbc0ef2be8a3318b51e456ce7c8660f4dd3
SHA512
c735aa2ee813ff830d82b18b44ae42049ca3b48134cbab49ff0e1b1ade3dfd2b6c5e2fbbdfe0d8bfad7eb5ab9aad6081b6f4c914fbfeec857389ff7c58911952
SSDEEP
1536:9tvmXChaqi4OdJWNUS/7wDelWpfthn1zhgF94pywgCSOdQdoelUS:Hvq3N1S/7wDelWpftF1+ARSOdRnS
Checks for missing Authenticode signature.
resource |
---|
28dcbf3fe39e261e65bed75f175361ce |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE