DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a252bd6ae1622bede4bd227d4b60026d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a252bd6ae1622bede4bd227d4b60026d.dll
Resource
win10v2004-20240221-en
Target
a252bd6ae1622bede4bd227d4b60026d
Size
140KB
MD5
a252bd6ae1622bede4bd227d4b60026d
SHA1
118d043aa53e2921ec461368cabf5c6a7d42078d
SHA256
580f18b46e34bfd77b6b1e72a609876150e23d70bfb5d52eef15668b87a19be8
SHA512
b4f8620941dc9e4f69d82b332ff99e8bb58d71db24142f799f90c80c26a8ab65037667b6ead4f1d6e1f044a77fade9da39f0f386c48297a3898c82882bcae850
SSDEEP
1536:OmBoByNqNzq5cIRmTsc9PeNJ/2xZuIxFl+9RV1oI0nbuZi92j4L8:HBdNqq5RC9Pebc4Ql+xx0nbuR4I
Checks for missing Authenticode signature.
resource |
---|
a252bd6ae1622bede4bd227d4b60026d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE