BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
786354d8d2be3ed0fefbfdafe7cdaac1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
786354d8d2be3ed0fefbfdafe7cdaac1.dll
Resource
win10v2004-20231215-en
Target
786354d8d2be3ed0fefbfdafe7cdaac1
Size
139KB
MD5
786354d8d2be3ed0fefbfdafe7cdaac1
SHA1
03a084926e404593cfb57d74db7a10a38ac6192f
SHA256
18c0a6cb6dab6626abfd3cb983d3bb42ba28da046b5e680c6fff44e069fb3390
SHA512
c9bb1b82e6543cafbf8f08bb031832e117c4dd862137a076370ceff235deeef63edc5a4348cdd76f920c7fd520e92a61b94221e9fc4671e32acdd3633fffc431
SSDEEP
3072:lcnQDZdjPyN4cluLFkFk1tSAj3FKtQUOExIpzqP/Hm22GBFNIv:bP24clCFkF2SApKQsszqPvYq
Checks for missing Authenticode signature.
resource |
---|
786354d8d2be3ed0fefbfdafe7cdaac1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ