DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5291a7355b288393f306c5856417eb2e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5291a7355b288393f306c5856417eb2e.dll
Resource
win10v2004-20231215-en
Target
5291a7355b288393f306c5856417eb2e
Size
167KB
MD5
5291a7355b288393f306c5856417eb2e
SHA1
224cda8fdd83cddf71e5b02ec090adf925d61ff9
SHA256
ea55845158ba7f5f7253a1bc5e22a06f566d43ea4366b9101e3826f2d25d99b1
SHA512
b25864b984c866796f1e07421986ce6e5abd15418acc395f9b3a689c4bfd2978c454b104ec333e4a9f9951a309097fb0c4e58bd1c1162b1db5a951388431b313
SSDEEP
1536:+qsUYrXpK93hKdcCwXAlJDWuDLylol7LVpgKCzOxfDq7gKUw:O1r+3hKOXAlNly+xLV6KCzOxwN
Checks for missing Authenticode signature.
resource |
---|
5291a7355b288393f306c5856417eb2e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE