DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
4ce9b48dbfa9e4383ee0494497d4d9a1.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4ce9b48dbfa9e4383ee0494497d4d9a1.dll
Resource
win10v2004-20231215-en
Target
4ce9b48dbfa9e4383ee0494497d4d9a1
Size
158KB
MD5
4ce9b48dbfa9e4383ee0494497d4d9a1
SHA1
1a5c6134dd5c78f08c7fcb85c0c10e80425cd794
SHA256
072645f3cdb1b04b8dd793f89b125daafc19a383507fa054501d566647eacc54
SHA512
49c27aa50af9f70feb4114a025fa6d1aba406d418c305926abcdc2f1aef9b6fcbb14473d9bfca462c9269ade59e51a2eab6f81fa417bd7724fc2399b3381f03a
SSDEEP
1536:1ctMSm1eMdlxVd/JAuNK3XvNTIDMWXO9mxWdupQeDtFg0XtbQLYq4z3X:1ct5m1fdz3im6vNTYMjTe4WtbQE
Checks for missing Authenticode signature.
resource |
---|
4ce9b48dbfa9e4383ee0494497d4d9a1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE