DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3764d7ebdaacade6d896ddffc73a7eab.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3764d7ebdaacade6d896ddffc73a7eab.dll
Resource
win10v2004-20231222-en
Target
3764d7ebdaacade6d896ddffc73a7eab
Size
86KB
MD5
3764d7ebdaacade6d896ddffc73a7eab
SHA1
4f97e18db467e1a922158066f158b55e0879af3c
SHA256
881386053a433194154e657e1720e4e55c4f607846d718d201b7156f609e1e9e
SHA512
1a9be493c9ba4f4693e47c0ec33c6b9ea5fc41f6ff3d21efc34a3ab68b8c06862ab85598f16c2b65953f2d3577550f213c9c524b7f2413162a6546bad7fdbd15
SSDEEP
1536:L1YumjH8OhDz8nW4iRVUoYDGxw6sz4rbaZo5lXoUn/Bn8xg5iWqUDQ+Fcg2q3BBy:x5mjphI8YDGxfszUbt//B8xd9gZFT3Xm
Checks for missing Authenticode signature.
resource |
---|
3764d7ebdaacade6d896ddffc73a7eab |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE