DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
64dda97baedfdba0a6f73f1b5ea8296d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64dda97baedfdba0a6f73f1b5ea8296d.dll
Resource
win10v2004-20231215-en
Target
64dda97baedfdba0a6f73f1b5ea8296d
Size
82KB
MD5
64dda97baedfdba0a6f73f1b5ea8296d
SHA1
b008f2736ca8e6df89aa3b4de0d9f09254e51db7
SHA256
e327c8e52a39ad48748fed1b190bff64807e4bcbe0046186977d9774e950de28
SHA512
279e1742c3497138012a5ee4b20731ea49e0a44798ed68fb3e62963066503bbf59c5c350cfdda07dcb1c5fcfe791277f560181adc2802a6862dbf45c77c09fe7
SSDEEP
1536:bH1GmhxBXyaL8/hPQcdUDfWopO8naR8T4pyRKtdWsvPMpnys6FMv1oI:bHccCm8rdeOoI2aCItwLys6q
Checks for missing Authenticode signature.
resource |
---|
64dda97baedfdba0a6f73f1b5ea8296d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE