DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
7a4808dd222a4d6c196c4107dddc6bc5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a4808dd222a4d6c196c4107dddc6bc5.dll
Resource
win10v2004-20231215-en
Target
7a4808dd222a4d6c196c4107dddc6bc5
Size
158KB
MD5
7a4808dd222a4d6c196c4107dddc6bc5
SHA1
80c037c301e208aab5233a6c2aeec6a41172fe8f
SHA256
99b42229bbb060811211bf40efe9477a388d0f2bf4a7e1ae4b0557911eceae9e
SHA512
40ef187a99c1c5d7c3971e8aab976d077adf73045c0ed60b90e9034e6d8f459c6460d5af698f6f9c8f8750e2b2248fc77441dd5002df06872a492e14cfacf97a
SSDEEP
3072:TsW9QwbFrSPShsN24363fXwB1s2FyR0uoxp:TsW46y1q/wAQxp
Checks for missing Authenticode signature.
resource |
---|
7a4808dd222a4d6c196c4107dddc6bc5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE