DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
979d93b7bf24cf5942029d926816645c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
979d93b7bf24cf5942029d926816645c.dll
Resource
win10v2004-20231222-en
Target
979d93b7bf24cf5942029d926816645c
Size
59KB
MD5
979d93b7bf24cf5942029d926816645c
SHA1
eda8377324ae45e2f7bbde77d1ca5fb1302ea918
SHA256
561a450138a877849d2abf6da7c5b47992a4f841ae5e2fb8b91f9a7d1e4da7d1
SHA512
288bec891befc300f43295b29075bfc580587cd0e799e64e4b38d17d8185d2b101acdd18f6b493a3c8b6d226c8b57d5cf83fa0e8d554b871f4bbfff7e31cf40d
SSDEEP
1536:AIywfQwPOZEaICfjtXrmP5iB3SIb5VLBJCujmWGdX:AIrIFI6Mg3ZrLLtI
Checks for missing Authenticode signature.
resource |
---|
979d93b7bf24cf5942029d926816645c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE