DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
70bde56c8273b5d8edf37fc4abbcd1b2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70bde56c8273b5d8edf37fc4abbcd1b2.dll
Resource
win10v2004-20231215-en
Target
70bde56c8273b5d8edf37fc4abbcd1b2
Size
167KB
MD5
70bde56c8273b5d8edf37fc4abbcd1b2
SHA1
23e36b790361fc85677ca652639c3bf348157a94
SHA256
4919574f4fc077513a0fe0702e0a94e48056fd637b8f3aa04fc1cbcb20819fd4
SHA512
6382f6eaf4e05bb1bbcca81e24efeac5d80ece2699518625ca0997fc15863162b80ac0a3a42d27b1fd1c9da9c39a5fdf3f0fbdc7e2ba5e9d80b4906dd1a8375b
SSDEEP
1536:uww0W3V1419r6KEJT7NC0LaXV0g17kLiDbWQpxpl22d7o6Zcdxx:uV0W4S/TJCv/17FRpk2uscdxx
Checks for missing Authenticode signature.
resource |
---|
70bde56c8273b5d8edf37fc4abbcd1b2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE