DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
85fa7e8c95e1e81842b5b78c26d62495.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
85fa7e8c95e1e81842b5b78c26d62495.dll
Resource
win10v2004-20231215-en
Target
85fa7e8c95e1e81842b5b78c26d62495
Size
120KB
MD5
85fa7e8c95e1e81842b5b78c26d62495
SHA1
37563c3972b6069208fa7510ba32a7c24c759425
SHA256
d005a6f57d4cefc32be6e478077f470f769830a5ca8f4c425233e1fe1712a307
SHA512
73bbd5483aff05a0e99d75b57093c719e87788de1e2254220f5353329fa14d83cd56647294cad7445c7aef6ac77eb5142b1c77397eeab57a11ad551d6aa59e10
SSDEEP
768:Xy5q4QGnoI2PHJdvrGFT72G3qnZ/lJzgr9rqQD+AfqkQwEANiBqCXpYv:i5q4QctGTe7O/PUrrD+Sq+gqCXpYv
Checks for missing Authenticode signature.
resource |
---|
85fa7e8c95e1e81842b5b78c26d62495 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE