DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
565dddfea793ee88c2f1734f99c2477e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
565dddfea793ee88c2f1734f99c2477e.dll
Resource
win10v2004-20231215-en
Target
565dddfea793ee88c2f1734f99c2477e
Size
158KB
MD5
565dddfea793ee88c2f1734f99c2477e
SHA1
98de2ac1d532766735eaba5c857d95186195ec0f
SHA256
a3b9cca63c6a9a265c1ddb75b74b08dab94c44547ed1564028f2e0529f82c4c7
SHA512
4cde7efb5e64ea7e335fc99d0e9e7f3742702a9afad5acd600f0d948dee7777a0d742d690cc1042d3f4e37a5a78fbff79cc9c0d2954b1e80619a01f748aa2528
SSDEEP
1536:gqhNRESQLAN0G8yB/AV8PWz6MqbJhElna2m/acYp7cccW7+BpBdWg0z/DV:Z9LQLQvH/c8aqnQad/auxWWbUz/5
Checks for missing Authenticode signature.
resource |
---|
565dddfea793ee88c2f1734f99c2477e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE