DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
5c1a6684dbf962a566e806c8e1f60ddd.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c1a6684dbf962a566e806c8e1f60ddd.dll
Resource
win10v2004-20231222-en
Target
5c1a6684dbf962a566e806c8e1f60ddd
Size
158KB
MD5
5c1a6684dbf962a566e806c8e1f60ddd
SHA1
094214b42728c397823bfee968e92ad07be24006
SHA256
df5937d11b3037e263cebe1e006edd3b415f0283dc916c3f1a788e20f95aa36c
SHA512
fd2ded28fc381ccf7ba5bdcd2625fe98ba4b5064680542b3849dc562725cf22fb06f4d4b316e40a99d289444e60763ecfd3e153300502bb439a9a19f2f72968b
SSDEEP
1536:nYWX1J7nLI2pk/6sqUP47PZAMsz4rbaZo5lXoUn/Bn8xg5iWqU3y3qjm05bSpvH:YWFdb5sqTszUbt//B8xd9F3qjX
Checks for missing Authenticode signature.
resource |
---|
5c1a6684dbf962a566e806c8e1f60ddd |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE