DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
7d1a7f2964e5b0ee439b2a3b0dd256f3.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7d1a7f2964e5b0ee439b2a3b0dd256f3.dll
Resource
win10v2004-20231215-en
Target
7d1a7f2964e5b0ee439b2a3b0dd256f3
Size
86KB
MD5
7d1a7f2964e5b0ee439b2a3b0dd256f3
SHA1
daad24562e81817a7229937f84dc81852741a790
SHA256
a13e21742ac100433c07cc70be1d25a0e38534291ed9bc279558e53db73d4d4b
SHA512
3fb704f6dc44362cae1c100603206b031dda63ecff5f6a0fb76646dad1106867c86aa0af79b931c58a945e8c3e00ae73e2ff4f2e30eeb09c8d2eda209401ae49
SSDEEP
1536:QwmTtwh1Zm9OIfqQM95W4sSC1GGw4osaMOb55Ng7SF4JT1i4rJQJqMjLOuD2:Jt1ZHQM9Y4yvosaxrmLtWrLOuq
Checks for missing Authenticode signature.
resource |
---|
7d1a7f2964e5b0ee439b2a3b0dd256f3 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE