DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a1c98c043d4de82de20dd2959bb3c34a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1c98c043d4de82de20dd2959bb3c34a.dll
Resource
win10v2004-20240221-en
Target
a1c98c043d4de82de20dd2959bb3c34a
Size
83KB
MD5
a1c98c043d4de82de20dd2959bb3c34a
SHA1
4565a03ff3f8c8585af6a9c91aa7611a6786ae95
SHA256
cd8a9a3e470e6b72250d273d1e9e3f4f53f41631417cd69652e6cde4ae19d3f1
SHA512
9eff4fd6e4fcd32e8ff079d63a29ccd8e640064542f97c50249b81c1f04c9bd069359daa8f1985fb649883895a91f251ebf54b9e16acb3ef7c09384a17b6bb4e
SSDEEP
1536:NqvXxReFaRpFXYukVZwCREWLXiStl1fgkPO5inV9dkWRiye3JTdII0eUVSCgREV:NsXxRewRpFX1kHwCaWiStrfg+dg73JNe
Checks for missing Authenticode signature.
resource |
---|
a1c98c043d4de82de20dd2959bb3c34a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE