DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
41746ea508ecb112054d3cc2dcffe7e2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41746ea508ecb112054d3cc2dcffe7e2.dll
Resource
win10v2004-20231215-en
Target
41746ea508ecb112054d3cc2dcffe7e2
Size
86KB
MD5
41746ea508ecb112054d3cc2dcffe7e2
SHA1
9eb2575eea46b821e99a1c1a1b180f2240a3bb16
SHA256
39938dc6ebb30b9f2164c8454985db8f6676f5c47dd6383260f3ccaac7ccdac2
SHA512
ea5e9ea57cac7673fecba3acc57710573966478d5de2c44bae9bbc51b6adddb7deae56316bd400e086e566794c94c2c0bd47a744fa8a74d0e43190c92ad7d74b
SSDEEP
1536:F7XV4QsSAqv4epHDaw2FXtGkgVC/d0ec6aWaah0A1j4WYjdog67LwXtGf:LISAe4uEBgkW6dXZRdh0A5kdogqLygf
Checks for missing Authenticode signature.
resource |
---|
41746ea508ecb112054d3cc2dcffe7e2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE