DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
Static task
static1
Behavioral task
behavioral1
Sample
8ff1f54eb33aa292da4ba5178875556b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ff1f54eb33aa292da4ba5178875556b.dll
Resource
win10v2004-20231222-en
Target
8ff1f54eb33aa292da4ba5178875556b
Size
276KB
MD5
8ff1f54eb33aa292da4ba5178875556b
SHA1
85cf8725dfd6acf371ad5266e96bdfc2558c4ded
SHA256
8c090e773187609f36e6dae86c2b454150883fd20799e1675abc81bfb421b6d1
SHA512
dc3b486bdc945c539c52936ab0877c324badd5d19049f4efac6e960dd5850489407844a41f62b638e8fde01a828f91a614ee9c4c97831138c41061d0f50402bd
SSDEEP
6144:dxgtU8eiUfsYxgtU8eiUfsYxgtU8eiUfsYxgtU8eiUfsYxgtU8eiUfsYxgtU8ein:dxgtTeDxgtTeDxgtTeDxgtTeDxgtTeDr
Checks for missing Authenticode signature.
resource |
---|
8ff1f54eb33aa292da4ba5178875556b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ