DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
49df9111f8abe673386cefe07dbda6b6.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49df9111f8abe673386cefe07dbda6b6.dll
Resource
win10v2004-20231215-en
Target
49df9111f8abe673386cefe07dbda6b6
Size
82KB
MD5
49df9111f8abe673386cefe07dbda6b6
SHA1
61b1cbac0c3d4eb6429d0771c443169be6731613
SHA256
9ad6c6755247718a7113c2952be88a2417ecea4490e746a57259d439d412cc3c
SHA512
8bd2255983a11a3ab1baddf3ec3db04c66a0b629548b6cde5f4761faf08884e2dbf294d53acc6e66e2e29c162d9a83fbedbc895c62404ae73037405e58db1ee5
SSDEEP
1536:WEgW70P357PU6akCDAE8IAiQ/DjUf3gJhJPFMMJcGkHa7D9iobIX8xX:Xg1JqkCP8IMDjUiJpWaFxkXgX
Checks for missing Authenticode signature.
resource |
---|
49df9111f8abe673386cefe07dbda6b6 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE