DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
507c2d27ac36a3ee1c2737378d4d999b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
507c2d27ac36a3ee1c2737378d4d999b.dll
Resource
win10v2004-20231215-en
Target
507c2d27ac36a3ee1c2737378d4d999b
Size
88KB
MD5
507c2d27ac36a3ee1c2737378d4d999b
SHA1
4f9928739e8d69322729d24b42de2f32009bf1e4
SHA256
4f181ab9e604121169c121350067611e6592b6eba7ecdb3fc3872c7d0ee8c9be
SHA512
629387e5a2570b1f3abad234fe5ddf86eb12b5b6afc86e58c6e6dcd95717ab262b4e3e6f5987bea37f7b4315c60af8ca7fc2426d40071aab4632515c9d9e233d
SSDEEP
1536:FcBajaoV0p4C82yiA+DIaWnzD+IEQkDREvHeKQgh40dHw64yHWvLackP34qoW70C:FWkv0p4C8pGIakp/kDRKfK0dQ7vL6Pzz
Checks for missing Authenticode signature.
resource |
---|
507c2d27ac36a3ee1c2737378d4d999b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE