DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
49905ed9c8ebf3ab818a81115249ebfe.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
49905ed9c8ebf3ab818a81115249ebfe.dll
Resource
win10v2004-20231215-en
Target
49905ed9c8ebf3ab818a81115249ebfe
Size
87KB
MD5
49905ed9c8ebf3ab818a81115249ebfe
SHA1
fde93b8992f69ec2e48f63c79ab126ff5e8497b5
SHA256
7e4e77db2523a155016a0319b2ebf7446f4f4a3389d39c8c44396decf9be76c7
SHA512
59ea27156c1c3f7860b036c2c473a1a2c2770712c68392736b6db6678ba855c83e914d2a82a6e10cf274bc2c3826cc570c2bd011bdb147d6b345e3362f47b089
SSDEEP
1536:vFmQF67IwvZ4Aisapc+HEsvNQCJIf4cMTXEYZPEwinNiZPh9Ar7wcZ:MewdiXLzQCJIf4czYZPEwinIth27B
Checks for missing Authenticode signature.
resource |
---|
49905ed9c8ebf3ab818a81115249ebfe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE