DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3a95de5734c7a483a95fcdaddc93e49d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3a95de5734c7a483a95fcdaddc93e49d.dll
Resource
win10v2004-20231215-en
Target
3a95de5734c7a483a95fcdaddc93e49d
Size
167KB
MD5
3a95de5734c7a483a95fcdaddc93e49d
SHA1
45866b851618422d4319a648920d21ed02fea5ea
SHA256
540f9ee1962aa46c1b9902db1505972e4e67843644d200293658be6d7372d0f3
SHA512
3ebc48f15d7276d44de9130cbe703d804ccb17f14fbfaa4bc32f642f04b791a48b54bfef7787acfe053744355fe6eb2decd16a6bbbed3f6498a3ac3378030ce2
SSDEEP
1536:d6YoMyRwF/Zcupu5I1hxPQDry9lPG4bR/PV6Evz4YY:AYoMwwJZzM52hxYUPGiVt5v
Checks for missing Authenticode signature.
resource |
---|
3a95de5734c7a483a95fcdaddc93e49d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE