DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
50c68c2b7080c1b7f67bc8d18fd3d00b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
50c68c2b7080c1b7f67bc8d18fd3d00b.dll
Resource
win10v2004-20231215-en
Target
50c68c2b7080c1b7f67bc8d18fd3d00b
Size
167KB
MD5
50c68c2b7080c1b7f67bc8d18fd3d00b
SHA1
cc1d1b663cf60297407b731b4721191e0089310e
SHA256
5d8c859ce04096517ba3123854ef4e96347269573fb5a6618f05a64f15995f09
SHA512
29aa679c65f6f43a4f2b3409d805dde36d20d7a61a81ab445cdcfce77b604b55f9bf5b6f3eb0017a0695eaabce794dcc21eed843d3a8b627703bdd165eb7ae04
SSDEEP
1536:sCxInV9bpCKRTWxXeESfsmECMiRYnsPvv4aKGimOPBm8+JZ3GmG4E:YVXWxXayFkYngnJKGjOwVE
Checks for missing Authenticode signature.
resource |
---|
50c68c2b7080c1b7f67bc8d18fd3d00b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE