DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3cb4ef1c4aa7a2771e43ed821a87f805.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3cb4ef1c4aa7a2771e43ed821a87f805.dll
Resource
win10v2004-20231222-en
Target
3cb4ef1c4aa7a2771e43ed821a87f805
Size
86KB
MD5
3cb4ef1c4aa7a2771e43ed821a87f805
SHA1
5f63039bfc34ecb96f3371511a72a430920c6b4e
SHA256
20f1a26dd13d4b5be0704ec8ab8d163fd5ac3e768cd38e34b18044ab1f0a520d
SHA512
6c72d3965b445566686079e7e29ab1580cd18bcafc2dda02d700605e21533498830f8b1bbf51bb1afd31ac7b3b0501538ee53fe1833c61f5520eeed758835c01
SSDEEP
1536:8eLSJ7KI5ybXuTmZymFdKEn2lsBx6/vX2VVAueGOXP9F+8BDMmUS/bd3Oq/yAaIL:DYx5ybXhvdKawXEJe3FFoczdhXaRK
Checks for missing Authenticode signature.
resource |
---|
3cb4ef1c4aa7a2771e43ed821a87f805 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE