DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
86054ae938cbcfd76f6817422d0ad8c9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
86054ae938cbcfd76f6817422d0ad8c9.dll
Resource
win10v2004-20231215-en
Target
86054ae938cbcfd76f6817422d0ad8c9
Size
158KB
MD5
86054ae938cbcfd76f6817422d0ad8c9
SHA1
5b6dbc7f0238856cb604a137a24453b40e8043bc
SHA256
04524c89d3d53feb5abdb2596a06b312fdb984a496d5c00d336d492616d899c9
SHA512
884b2657bfed37f9956f2bd9761d26d7d8efb995991f5ace35682377e18a53395ecfbfa6d3ad6eb970ae1fcbb3fa9419b4cc9510b42b5f7114b386a37b21d40a
SSDEEP
1536:Ftq2bOC91VPIjh5iNCyTfYtcq7piMMxFH1rORwFC+zqatbLbpMhTf:+2t91VKveCyPqFiMMLljC+zqa1bpMh
Checks for missing Authenticode signature.
resource |
---|
86054ae938cbcfd76f6817422d0ad8c9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE