DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b64a9851acebbd309871b766201cb239.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b64a9851acebbd309871b766201cb239.dll
Resource
win10v2004-20240226-en
Target
b64a9851acebbd309871b766201cb239
Size
86KB
MD5
b64a9851acebbd309871b766201cb239
SHA1
4a7259ca93087b83bdfa393608ccbd3b519f4086
SHA256
9e585d1ad7d5ba1069cf1dd0c8113a07da2d356d4ad09fa5aa7de6dbc06aa99a
SHA512
604cacceafad9d1fceceed4cc6527894f39dc8b4ec1952035dddb46c3f7ab540990c7e03afa92e52421e3c468781453bdf90e7326d77896c00571c78920a4611
SSDEEP
1536:QDhifOHX4pKOBhFrwvnVnD9kE7uPd1V1/WFI2KzmRxBqLzG1Z05jBRiBcrsL7t:QDMmoUOBhFrwvnZ97u/V1/WszmRXqLyb
Checks for missing Authenticode signature.
resource |
---|
b64a9851acebbd309871b766201cb239 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE