DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
41e914626495bcbbd15b328e09f8399e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41e914626495bcbbd15b328e09f8399e.dll
Resource
win10v2004-20231215-en
Target
41e914626495bcbbd15b328e09f8399e
Size
83KB
MD5
41e914626495bcbbd15b328e09f8399e
SHA1
a0646bc35d0a63e3b0e8ebebd65ce8b71816ccfd
SHA256
c58a54048e961cb501831dab9b79b1a78db04c0fd239e6bc67c09fd6bf8010b3
SHA512
e647ecc3ece59a419ec6f6328ef2afdf743c829f6238e178b52cf583d16023921b8f226827202f2ea3a236664b4058f1a7ace412edaf66771b3ceef56783e1be
SSDEEP
1536:AHi1lYagmnHNv6G0MWbUc7m11qsXrTf2z1f2Bx/G5evZ:AH6lYzCB6WWbUcE8IT+12BM5wZ
Checks for missing Authenticode signature.
resource |
---|
41e914626495bcbbd15b328e09f8399e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE