DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
543a98e52c92643a97f9d7c1a239d458.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
543a98e52c92643a97f9d7c1a239d458.dll
Resource
win10v2004-20231215-en
Target
543a98e52c92643a97f9d7c1a239d458
Size
86KB
MD5
543a98e52c92643a97f9d7c1a239d458
SHA1
a3aa8f2f85b9cbf80de350ec7cdd917b7b9cdc55
SHA256
56be21c5082a79317b3f68d7be3560efea816cc4538e4adfa1e65d5e52d369e4
SHA512
3e4b3c9c08c75baebc762e7d42ae027f4ef154f95448ea9e5120576fb0f1bec14e4211ad86b8d00ae1c145f805a4f3ed377ab900fab6d4147566d84d8d91bb3a
SSDEEP
1536:W9xsiCuMoXcofAH9PEkdootRM68jtLua3CVenTulW+8ktQ+TYygVtCe6yIaKVNCL:W9XHMoMoGLdXtOdRLua3XTulZ8kttYya
Checks for missing Authenticode signature.
resource |
---|
543a98e52c92643a97f9d7c1a239d458 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE