ghi_HookOff
ghi_HookOn
Static task
static1
Behavioral task
behavioral1
Sample
ba6ebcffcdee3a42d865dec37b3cc856.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba6ebcffcdee3a42d865dec37b3cc856.dll
Resource
win10v2004-20240226-en
Target
ba6ebcffcdee3a42d865dec37b3cc856
Size
8KB
MD5
ba6ebcffcdee3a42d865dec37b3cc856
SHA1
b744aaafb883c8df7aff059f9b71f654f95927fe
SHA256
3b9afcc8bed0639482aa221be6919fdc6051ed2a4d49376835a995082db0e126
SHA512
70cf877fe7c2e9c63ef54657008a7ac0ee381606d3ebbe3abda93624a47ee07f45746d5f254218c59714a52707a9b03639fed1a2b6f9b8be2a2a59cf8e081946
SSDEEP
96:nPo2xDItAH5kwtO2x8sZSUiDGz8l91aPqI0R4X4pjcW5CDYY3:nZxDItAH6076uteIqI0R4ajcW5QYY3
Checks for missing Authenticode signature.
resource |
---|
ba6ebcffcdee3a42d865dec37b3cc856 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ghi_HookOff
ghi_HookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ