DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
50b1fc2a4be066c3bf37513b81051eab.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50b1fc2a4be066c3bf37513b81051eab.dll
Resource
win10v2004-20231215-en
Target
50b1fc2a4be066c3bf37513b81051eab
Size
86KB
MD5
50b1fc2a4be066c3bf37513b81051eab
SHA1
9496890f401f2908b79e25f188abc7ab180ebe27
SHA256
d89eb837f6f8ba21e1cf392bd89a793256fd4a403c90c75f40fc9d6ea99cb502
SHA512
bd4b07c7b2f10dd98db2c074db42423b6c9a968fb7fbecd8e7c6b65a761c0944377ff06777b1bbb030027c6ea943d3e4fc44d186bb6412a742a2a662491b4308
SSDEEP
1536:vVbIfZI5d1nFxlrLpWQDrtQMjQCBMu9z107XPI0IhMutnvbV0BCLVVsXrtQ3:vFoZanFHLQ4bjdMuR10vCMOnvy03sRS
Checks for missing Authenticode signature.
resource |
---|
50b1fc2a4be066c3bf37513b81051eab |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE