DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
7a202e7a1511d8a91788ae81826335c9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a202e7a1511d8a91788ae81826335c9.dll
Resource
win10v2004-20231215-en
Target
7a202e7a1511d8a91788ae81826335c9
Size
82KB
MD5
7a202e7a1511d8a91788ae81826335c9
SHA1
c1c25768880cb9076703483957d991649a2e8a5d
SHA256
b35c0bb0bb80b3df7553a34467fa300d30c53c4aee3b40ee912918207941187b
SHA512
c2d099b9ab1ae788af16300d27340ddb25f356033bc402cada8a5cee170f205ae0a4e6c61a229dcbf9422b946a15aa50a1b69ad7d2e1e83b9d6e157c47da0ad3
SSDEEP
1536:wCeSax7Oc9svEHdGbRd/K6p4LcPWT1V01kbn7FOvcl9ErSKkpxy6b05+bEHd/:wvSM19svE9GbRA6pWOWTQ+Av6xy6Y+bY
Checks for missing Authenticode signature.
resource |
---|
7a202e7a1511d8a91788ae81826335c9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE