DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3872a0c53cdcb0352cdd25ae1fa8742b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3872a0c53cdcb0352cdd25ae1fa8742b.dll
Resource
win10v2004-20231215-en
Target
3872a0c53cdcb0352cdd25ae1fa8742b
Size
88KB
MD5
3872a0c53cdcb0352cdd25ae1fa8742b
SHA1
c8272a35ba4241cbf156e2fb13a1a653d1dbca06
SHA256
ef82ba60b0f102ec1c37d7da0b1635af198ddf470baecda8cc51810bcb1abc6b
SHA512
123ca0f00a063a6b08e78f6944dec122554f4eb3ebd7e3e568a0f332de5e8579a8aae251e2929ee88c5f2ed1c6b055cc799a8c26a4a9eef084de6f9032c408ba
SSDEEP
1536:n4KE0U0A0QOdAplG2+UGO/zdhVGjuHvr8WKSvofybc8eT9aOn/oC8x9n48rHbfUt:n4t0UX1OdCjSGpLGYySvofybIT9aOAzG
Checks for missing Authenticode signature.
resource |
---|
3872a0c53cdcb0352cdd25ae1fa8742b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE