BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
490f72e5bb85e4c5efc47538c59ba57d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
490f72e5bb85e4c5efc47538c59ba57d.dll
Resource
win10v2004-20231215-en
Target
490f72e5bb85e4c5efc47538c59ba57d
Size
24KB
MD5
490f72e5bb85e4c5efc47538c59ba57d
SHA1
04e76b2446021e21a2acca0312a5d67a15def061
SHA256
c34bfbd2f117fbe1e3fdf25faf73e87abecb218ee7028e60eaa0d4f839cfb584
SHA512
c85258dbabebce191044d7506d5d2f6c8f992cb6fd76d77e59600813a0200b2c1ceea85f16ecd9b6ce4079784f79057eb46fb5bc1de7a25bf0629d2fc89b7a48
SSDEEP
384:t2cr4Xk0204K9j9hgbOVvsTgMupXclIKy5ku1LHSxuMARvf:tL4X7204A+CkgdcaKru1LHlvf
Checks for missing Authenticode signature.
resource |
---|
490f72e5bb85e4c5efc47538c59ba57d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE