DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2b023c540b1d130a7f9c6e8a676eedda.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2b023c540b1d130a7f9c6e8a676eedda.dll
Resource
win10v2004-20231215-en
Target
2b023c540b1d130a7f9c6e8a676eedda
Size
80KB
MD5
2b023c540b1d130a7f9c6e8a676eedda
SHA1
ea1dbbd64f0e9be1ba1d6d73537df72f09bf383e
SHA256
9a6c8dd943414115f1d07532124725b5d06cdb1ad89bda15884850209fda65d5
SHA512
ae1e065cd1b056c94d4da1012c9b9a3f3e27b055b63b77bc49ad0e19cf1b4bcbf8674b2d2694bd853710b55483e58cb83f4c8af0d3cf18f8cb007fb54cfc670a
SSDEEP
1536:ioiXDBXYUJHA1Xjx46fdRXjcFHdl2w61tScNzbMITL9DssWpMY55:7iTKUc6SRXjcFHd5sScOkgJL
Checks for missing Authenticode signature.
resource |
---|
2b023c540b1d130a7f9c6e8a676eedda |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE