DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
aaf3e94920321ab0fc668109b4faf3dc.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
aaf3e94920321ab0fc668109b4faf3dc.dll
Resource
win10v2004-20240226-en
Target
aaf3e94920321ab0fc668109b4faf3dc
Size
86KB
MD5
aaf3e94920321ab0fc668109b4faf3dc
SHA1
05dab08f65c4871e1a9ac6ae67eaa282f67bd028
SHA256
03f691951bb647937f0bfdda2f6664c0dfb3ec7e8f011f5657c16d60130d774a
SHA512
16d8420d1c55098e34a49446914bae2dbe0af0f36413bac47c25b44ef11f795ac071ba2e9d80dca54e49d4a83be12d861ff1ef19a1cda80044612fe424edecec
SSDEEP
1536:4TdoOuTg3j1HbvGAmkBsz4rbaZo5lXoUn/Bn8xg5iWqU3B9Fut0R8zyNC:4KOb7uWszUbt//B8xd909r0
Checks for missing Authenticode signature.
resource |
---|
aaf3e94920321ab0fc668109b4faf3dc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE