DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
8ff0778454b154018be510040f9817c4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ff0778454b154018be510040f9817c4.dll
Resource
win10v2004-20231215-en
Target
8ff0778454b154018be510040f9817c4
Size
89KB
MD5
8ff0778454b154018be510040f9817c4
SHA1
73ecf178353ef8a585fcf8751c52a38af2978eab
SHA256
baf0ba52e620e7d26dc93825ebcc57e102c230e7efd23af47a0d181d508261c3
SHA512
abd6ecd1a9af8ddab6960bebd7b9f08c05cc4dc558a4e5a411c4aad81c880c26fd3c0741cc6a9b075f1a9810d66bf56487b3c088e22689f1cdcd81211e066034
SSDEEP
1536:J6Zq+qbdhpKpNDE0qHmOAUIcMZEMoX2LF2OnrnyRo695XUfeM66OAUI2:8Ztq8psZAUn2nsQUOOoOXU2zAUn
Checks for missing Authenticode signature.
resource |
---|
8ff0778454b154018be510040f9817c4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE