DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
66e1c66b857d4d3ac0be85260eb96840.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66e1c66b857d4d3ac0be85260eb96840.dll
Resource
win10v2004-20231215-en
Target
66e1c66b857d4d3ac0be85260eb96840
Size
165KB
MD5
66e1c66b857d4d3ac0be85260eb96840
SHA1
18861131f4a28daae712cf197bec61b8f9b85fe9
SHA256
8173531249608629d7f821938fef6f3c186542abcc53c730121ff8d25878b138
SHA512
b6ef1f301558c060c9cc96be82f5a7b730b6c10fd66cd174ceb4d32e1589410013cdca1722d87301ad4d0593d3f078fc06e609113d94f424d3609ded7563ab56
SSDEEP
3072:/+3zhiaTxRBWo+3zhiaTxRBWo+3zhiaTxRBWo+3zhiaTxRBWo+3zhiaTxRBW:23zhiat3C3zhiat3C3zhiat3C3zhiats
Checks for missing Authenticode signature.
resource |
---|
66e1c66b857d4d3ac0be85260eb96840 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ