DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
3e5d929e702e65048775feb41a4a407b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3e5d929e702e65048775feb41a4a407b.dll
Resource
win10v2004-20231215-en
Target
3e5d929e702e65048775feb41a4a407b
Size
90KB
MD5
3e5d929e702e65048775feb41a4a407b
SHA1
9d995fd1650e32540bcd97278af6c858d9e2de7e
SHA256
ea713f0bf349dc1a099f6921640edc5b58af62beaca8a550c5a56ce85816b9fb
SHA512
b0fbb1b462d004e741f7c31531c6959d6cf4803b86b658b21ad8196196ad3eaf6d3bbe40f10b312228bea532a37dcb40afeb2bdfd6440f2deb999c4a6a29cbed
SSDEEP
1536:HUdrjTYpV0j2KCkvYmLo2Y0NlZ+4hiXJIcv3T5Jy1jIfO+CODwuvLgmbCdJi4BGu:HUZT4eo2Y0NPIJIYsdITDdkmcDGN+m01
Checks for missing Authenticode signature.
resource |
---|
3e5d929e702e65048775feb41a4a407b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE