DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
79af807205858ee5f4f7ca88af1099be.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79af807205858ee5f4f7ca88af1099be.dll
Resource
win10v2004-20231222-en
Target
79af807205858ee5f4f7ca88af1099be
Size
59KB
MD5
79af807205858ee5f4f7ca88af1099be
SHA1
fc1c5f3e4f3e1f2389ecd30972ffe7adf8aee7c2
SHA256
c20be9b14043946f6d3876898f407f80480faccb87370847dca3546fb26960df
SHA512
8d3e796dc410529f496cd98eac9208a9eabe0dfe0e6c485960d3d05467db1623f77d1d05f500cedf1e5f632c7f22a94bdf3489fc1a25fcbd236e13adc90bb3d8
SSDEEP
1536:jIy3lS068SXxsGv7qNfpu0UW+EPWXEeo/:jImlT6fByd0189eE
Checks for missing Authenticode signature.
resource |
---|
79af807205858ee5f4f7ca88af1099be |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE