DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2c171eadfd463cdd446a874ff5b18c6a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c171eadfd463cdd446a874ff5b18c6a.dll
Resource
win10v2004-20231215-en
Target
2c171eadfd463cdd446a874ff5b18c6a
Size
91KB
MD5
2c171eadfd463cdd446a874ff5b18c6a
SHA1
ba184fc03c061aec90551d169aee3a57f7e6e8ba
SHA256
d2115cf09ba3ad2322ac6c2a6d57200608afa0ea1c893c9103e3fb41e02211f2
SHA512
724bec908a966a96d0b71742ec9ca09329ab88619b6c206167f40ec0f185ea2860b72e3f1a4ac83f099f1692a4829c4f28d8db8cffc2b46f77be4c8544b27c0f
SSDEEP
1536:C6+BYE7wsAWcJusq3AQ9UmEFFP+oHkw5f0zEoyNCwF3mUB4mmZ39Lw76cqA3J:CP2E7M19HWUmCx+oEw5Qpa3fBdmZtU77
Checks for missing Authenticode signature.
resource |
---|
2c171eadfd463cdd446a874ff5b18c6a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE