DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
493b03cf78267c2adae63bcd1a46d8b8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
493b03cf78267c2adae63bcd1a46d8b8.dll
Resource
win10v2004-20231215-en
Target
493b03cf78267c2adae63bcd1a46d8b8
Size
140KB
MD5
493b03cf78267c2adae63bcd1a46d8b8
SHA1
7f38ba82ac70a76b488542e80c36694ddfb60b23
SHA256
a632ec81ed26cb3c6c09dd875963e0c25d139e21e9052c3035718b9ffe7966f7
SHA512
622d4691997d1eacfdbd03fd524f6de6671878f82524d39a60152e54a61bab34b48c492a3da43fb22bbee240b48e09ac6a97a057341d87bfe0db9f8fc56f6590
SSDEEP
1536:PdLoeq3OBg94N+FaNYLY8pENeJZDVU/Sx2YPhviKWrYZe1zkNuk2RdQzkSe3:PBo53OC4wFaNtxiZDkSdsrYrNukPzkt
Checks for missing Authenticode signature.
resource |
---|
493b03cf78267c2adae63bcd1a46d8b8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE