DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
2ccdfd1b0ab92de60809e4fd166e33b6.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2ccdfd1b0ab92de60809e4fd166e33b6.dll
Resource
win10v2004-20231215-en
Target
2ccdfd1b0ab92de60809e4fd166e33b6
Size
158KB
MD5
2ccdfd1b0ab92de60809e4fd166e33b6
SHA1
98017fa669649a6739ea253d3f14e700b944599d
SHA256
2c86f8056cc918449ee42e66788620048d53fb9160e3eaeb3db80fb74bdc3634
SHA512
7dee9f9fb66adb69a52a4f09e3c40dad247443625c8276e59089515d6978f82afae2466f939244d4c3c199caf30f43d82339b44766900b84652800b420651d52
SSDEEP
3072:j0k52B1XwjSiiFveQAE1Ki07uIR6CtB1X:j0k52jAjSvF3Ci07H6mj
Checks for missing Authenticode signature.
resource |
---|
2ccdfd1b0ab92de60809e4fd166e33b6 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE