DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
7c8eefe084ccdce669eb9445d2319d79.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c8eefe084ccdce669eb9445d2319d79.dll
Resource
win10v2004-20231215-en
Target
7c8eefe084ccdce669eb9445d2319d79
Size
167KB
MD5
7c8eefe084ccdce669eb9445d2319d79
SHA1
1b7e5eae969cad154da4f90f3e75a5835069919d
SHA256
8bb65274b708999aeeadc2926cc875dba58658bbead25a5d3041bbbcb2964233
SHA512
bdca3e2cc661d1728dd9ff477211c9aa2e3cbd39b6d4f184b149e025934df67d6dbea735194677d7ac38181abfc77bf17b0831b450f2e36d4b2b6e0472eb9830
SSDEEP
1536:cHrT1J2hI2rPHyT30UAI8YBiellfOjW9Ea8XZjP6qRQvDqVir6clgsi7I8:CMI2rPHyT3fqsiel0IaXZXTbsM
Checks for missing Authenticode signature.
resource |
---|
7c8eefe084ccdce669eb9445d2319d79 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE