DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
512c6226dd4a1207353178f2adffaf0d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
512c6226dd4a1207353178f2adffaf0d.dll
Resource
win10v2004-20231222-en
Target
512c6226dd4a1207353178f2adffaf0d
Size
140KB
MD5
512c6226dd4a1207353178f2adffaf0d
SHA1
8d9a96f193f0b56bb3840059aabc99bc12fea6dd
SHA256
598fc2edd085f01d4118c7386ca7a73ed31210f4508966d1ddf531e7788a4556
SHA512
feab11fdaabb8573d3e12da6a344a6719efa803107fc8968bb9460dea48b02ec6aa8be6ae676d27398f92747ca6eeb6c065336ae1c459c17055c934e9898cfd7
SSDEEP
1536:60oGAvAAjApFAvODmNJjccIaDo6PrPK23K6Y1WyxDa:6HNdWAvTNJzIarPKd6Y1Ww
Checks for missing Authenticode signature.
resource |
---|
512c6226dd4a1207353178f2adffaf0d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE