DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
74a1e958e29eed7c4847e6b6900bffa8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
74a1e958e29eed7c4847e6b6900bffa8.dll
Resource
win10v2004-20231215-en
Target
74a1e958e29eed7c4847e6b6900bffa8
Size
79KB
MD5
74a1e958e29eed7c4847e6b6900bffa8
SHA1
a7eb16e810733b92af6eb947ddaefded98ee1092
SHA256
08bd6381ebe43e813bd0e8ab3c0cf7b96cfc5c70e7bb4bd6a68d4a0836f20e7c
SHA512
1d7641fe2c6eeb334520502a4f71f72f6d37c965e409eb3ea3ec316a88c47457cf7f1caa15a95839fc6e02c3fa9932989ac848f5162ce840f1aa847fdff9a8e3
SSDEEP
1536:G5F7HD2ref+1uM6kOnGPDRAz1wH27VPe7sBTcV5NSF3ww1vEff:aF7yr1B6lGCz1wH27VQfVDw331vU
Checks for missing Authenticode signature.
resource |
---|
74a1e958e29eed7c4847e6b6900bffa8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE