DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
b7ee582891c1384ca4fc58170fa9b2be.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7ee582891c1384ca4fc58170fa9b2be.dll
Resource
win10v2004-20240226-en
Target
b7ee582891c1384ca4fc58170fa9b2be
Size
91KB
MD5
b7ee582891c1384ca4fc58170fa9b2be
SHA1
ca899b6b917387e0d9cf75ae7970bdaee44e023e
SHA256
818d5d1376f8f5d7567d428605713eab55ea083ff64629876a2a115b6a84f8c2
SHA512
73830923006886869d8d1f01958a4aa8e0def83ea1923b6e8cd64e92abbe66040f1b99efbe124dc67c83ad3499009e1af2f25eb4b5a3b734c78b5cc395867a85
SSDEEP
1536:ixKhdkpwHd2l6iu7OMxV3w8LXQtybrFd3/6/qxyqInJn85ww6ugtAaPUS0J93RLq:WKhdkpw92l6iu7BnfLXQs3xyq6J8wLuM
Checks for missing Authenticode signature.
resource |
---|
b7ee582891c1384ca4fc58170fa9b2be |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE