DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5140a6be0a5c4abcce3792246761ebe5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5140a6be0a5c4abcce3792246761ebe5.dll
Resource
win10v2004-20231215-en
Target
5140a6be0a5c4abcce3792246761ebe5
Size
140KB
MD5
5140a6be0a5c4abcce3792246761ebe5
SHA1
e137f3543c68e62916b19ab9681b48876bd8fe2f
SHA256
74c83e723edea915d04c0ca534390ab1a0e331d2949d130f8fdcf16b391becac
SHA512
7f9981a82ac25971da1fcc2d3ddea317d4e3bd2ceaa30803fc8d230a6444eed9f3bc0aaf257e59435dd3d0362579efee903cf2e0000c2a35050f64959694db3f
SSDEEP
1536:v7qHf3oX586Jvffp1oGvfWJ0OXEa/gOAh6syBIVtlhXXyM1IMK2xs/P:OAXy6JProVDD/0EsyBIPXihMK2xW
Checks for missing Authenticode signature.
resource |
---|
5140a6be0a5c4abcce3792246761ebe5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE