DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
539309538b09559bf5bd5d5ec3b1ec4f.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
539309538b09559bf5bd5d5ec3b1ec4f.dll
Resource
win10v2004-20231222-en
Target
539309538b09559bf5bd5d5ec3b1ec4f
Size
140KB
MD5
539309538b09559bf5bd5d5ec3b1ec4f
SHA1
1c8cff95d5f2298a36b544ec717eb3094dde9aee
SHA256
b745446e134f806d3308291f16195eeb66355fe5ba3794258dd163fb806fdbcd
SHA512
12269b0e5c9e1c6913e516b37c27e24b825547522060bb535a0d0cf1cc0e7524ed578c1c8cb2dd060f14b63a7ec2164f43167066de7f1bb7f621f2ed88fcf0bf
SSDEEP
1536:0LrcGs0DiEB9Q86i5eO76HewRPF0h8k79Pl5E0HW637Eo5:CrBsQ995x76+wRPFidkY7E
Checks for missing Authenticode signature.
resource |
---|
539309538b09559bf5bd5d5ec3b1ec4f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE