DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
64553f0624e8bf15ce433c302905392a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64553f0624e8bf15ce433c302905392a.dll
Resource
win10v2004-20231215-en
Target
64553f0624e8bf15ce433c302905392a
Size
128KB
MD5
64553f0624e8bf15ce433c302905392a
SHA1
a9fd6392eb9350953d09e0fb00ac62606ee20acc
SHA256
77f5c93c8e566d5b9c334500fc79b0cf3ae898b263018672dc5dcf8c5032ac3e
SHA512
5504d9eff9e000c4ed27e4d9bf97d20ea9f3c7b4bc889bc991c3a73b62a620b202eb667510c02d636d461a459fc073be90b3546977b1eb7860d2853e0c5d8cfb
SSDEEP
1536:ryqHQrqzXcoN+2TI+vdaCjYqBZkwuKoR7j3Ju/dkrwKW:l+G1NpNvdSq3kUy7j5WdkrwKW
Checks for missing Authenticode signature.
resource |
---|
64553f0624e8bf15ce433c302905392a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE