DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
9849dc56411049716d97c55856509aa5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9849dc56411049716d97c55856509aa5.dll
Resource
win10v2004-20231215-en
Target
9849dc56411049716d97c55856509aa5
Size
167KB
MD5
9849dc56411049716d97c55856509aa5
SHA1
fa1c00a5e4eb28aed35d9b2e4a6eab02d1b8f435
SHA256
da07d4e1a5d95d97eb8fd348c790e27f3ddd4670c03618ce8913577f8c6ae3ae
SHA512
d01afaabf37c1ef4673dbd03f879d346c624c430e1afcc2ee65955a62ce3f71ff85d0185b2b4ae33f5c2f5604cc0f0a167481fc2d136f80e1daadb5d72d28222
SSDEEP
1536:WAr9rUYuoCYtsZr3G59OxOEZOK7lD9sPrtUBxDU5NhYdu5qO9qzOx:9xwBx0sZD89sv9xstUbw5vYoqvzs
Checks for missing Authenticode signature.
resource |
---|
9849dc56411049716d97c55856509aa5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE