DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
8b1dba13ad4af8d8b3e04b1441c681a1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b1dba13ad4af8d8b3e04b1441c681a1.dll
Resource
win10v2004-20231215-en
Target
8b1dba13ad4af8d8b3e04b1441c681a1
Size
59KB
MD5
8b1dba13ad4af8d8b3e04b1441c681a1
SHA1
de32fac7d964b400e6e8cbdf1319032ea8d5dc9d
SHA256
4a513b9fd4d2722c6748aee03765a013c4a1a0f57ae3be55616c33781933edad
SHA512
8a4eb7f9f55b66f217bbdf61311d2e6ba6078453755417d69e1a47677bed604c65bcd784a5d1ede946f35f6b1037a9e7e92e80e999ce009b2e84767041409bb3
SSDEEP
768:6Kzyk/muT2ZfFfjwcbsuBJtfF6ZVhRob2yENLSkg69McgoIzKCyPo9sB1IhFZu9z:6Iy4HT2X+uLxF6VBEeCyw9scZGg8nz
Checks for missing Authenticode signature.
resource |
---|
8b1dba13ad4af8d8b3e04b1441c681a1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE