DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3700d4115c5f92ffd4a50de6f6b0ee5e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3700d4115c5f92ffd4a50de6f6b0ee5e.dll
Resource
win10v2004-20231222-en
Target
3700d4115c5f92ffd4a50de6f6b0ee5e
Size
89KB
MD5
3700d4115c5f92ffd4a50de6f6b0ee5e
SHA1
e3d0b1e1925de7b8b66d6d51a3b49fde53b109cb
SHA256
281d1862d4a53e6f2928df0b13392bc516ee322f4d607472454f79adcd51aed6
SHA512
6fdce97cae91c0a3b6e30a4edb99a3b9f9df173fccf0ecc6c0f05f18c26cdd8523063ef4f929cc75d88b186540ee209dd26fa8f3e955468c5bf8190256711a82
SSDEEP
1536:Q1W8TrJdNV66+JrJfVd5d0kaQuG4qbBnihEDTRS/XGpFWX5H4T90g6xNkDi7ZaQY:Q1WoXNV66+1ZpddTuDqIsNEWepxNrTu9
Checks for missing Authenticode signature.
resource |
---|
3700d4115c5f92ffd4a50de6f6b0ee5e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE