BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
b92df74b018455164660fbb50aeedb0e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b92df74b018455164660fbb50aeedb0e.dll
Resource
win10v2004-20240226-en
Target
b92df74b018455164660fbb50aeedb0e
Size
24KB
MD5
b92df74b018455164660fbb50aeedb0e
SHA1
b9f059c1cb8455b6fd33afa6e2ee1edb4d8737f6
SHA256
33ff47d215b65d21cded01910d3b25f6391e5bdb9fc211a9341013538be9a721
SHA512
1f05cf424755b93c88e4cafc665c84540b71234514b7c262d4c17770b7854550f5ff9b72866e066c40499281f44ec629101b5f65a1c179c54babc480f5a1ca6f
SSDEEP
384:WWPT5IUrLXoVxYVHmVI7Eky9ABxI8V7rPUsONKQRusXptoGhf:Vb5Iy4Vxsf7EkbbjbURKnCpuGhf
Checks for missing Authenticode signature.
resource |
---|
b92df74b018455164660fbb50aeedb0e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE