DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
8bf0abde5c856b50ba3712b5a614ac1a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8bf0abde5c856b50ba3712b5a614ac1a.dll
Resource
win10v2004-20231215-en
Target
8bf0abde5c856b50ba3712b5a614ac1a
Size
116KB
MD5
8bf0abde5c856b50ba3712b5a614ac1a
SHA1
69750bff4e3a83435ba381466dd500b7763a3799
SHA256
eaf4e536d6ed4dc64a5cf53dafa00ce10f663c90f9f8c8404cec0172ab4192c9
SHA512
e30ca7d1ff3bbe179135ac10d3e05951e36491fbe48edbb6cf5b01bcccc0dc16151de84c5bc1ed0a7d4b0525901ac169f3caa68a943a2b1bf2595f8dfab584f2
SSDEEP
768:a4GldFQoihqZOHQlS5opACVI0al0AECwOjC9TDFbvaLO0mzVIzb/stRIasEHDggG:a5LFQvhqZiQp8iClj4Wm5IzbgIasL
Checks for missing Authenticode signature.
resource |
---|
8bf0abde5c856b50ba3712b5a614ac1a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE