DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
58d61d42f7370879d557b29c2a652308.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
58d61d42f7370879d557b29c2a652308.dll
Resource
win10v2004-20231222-en
Target
58d61d42f7370879d557b29c2a652308
Size
167KB
MD5
58d61d42f7370879d557b29c2a652308
SHA1
18bf789c27d74316bb99973940d87fad4677a4c1
SHA256
ff938a3a40c10ef2790146c64b27489801aaae53f36f8d02e7652bda9c39c89a
SHA512
479c79e32594bbc3bd3c105c3232f1fe202458885feaba570503e204f8bcdde413d14501868baa6383b6be9b4cdf644e22f424671f5e4a743a30e825d46652cc
SSDEEP
1536:vqclyQU3uVIax07RlXFA3zee4wVWPI7GujswaliFjI95WhNMIeUA3:DlyQU+czFA3aeyI7PgwAiFj0kKI1A3
Checks for missing Authenticode signature.
resource |
---|
58d61d42f7370879d557b29c2a652308 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE