DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
732487b4c04f2ee57d13fab0dc81cba7.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
732487b4c04f2ee57d13fab0dc81cba7.dll
Resource
win10v2004-20231222-en
Target
732487b4c04f2ee57d13fab0dc81cba7
Size
140KB
MD5
732487b4c04f2ee57d13fab0dc81cba7
SHA1
dbb28ce52200a4312097d33093ae037e0a1f00cc
SHA256
0f0b731bcb4e655e125d86724b4d4eb04a71148301877a3736e5c575b631e4df
SHA512
6136547e22f70b29e9d7a4d1a1a8978ac2c70dc446264a2279471abc3e528a7c3d136a0a1df0d849bafe781f33ac818cb330eebfea90447549a0f8cfcaedeecd
SSDEEP
1536:jaeGwLjwCyBq1A/OkTcPNQzAO+qPd0cb8WoRDLmvhpkdE17:WeG6gs1COk4PazR+G0cR7kdE1
Checks for missing Authenticode signature.
resource |
---|
732487b4c04f2ee57d13fab0dc81cba7 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE