DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
0372cece4ed670dba49fd1e6a774358dab546e6358aa158983643ea1edd6bd13.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0372cece4ed670dba49fd1e6a774358dab546e6358aa158983643ea1edd6bd13.dll
Resource
win10v2004-20240226-en
Target
0372cece4ed670dba49fd1e6a774358dab546e6358aa158983643ea1edd6bd13
Size
120KB
MD5
bf4ebf0c25e7df264467a2c407d9e9e8
SHA1
42ebe9e6b153575e3b499fc35b2758ceac278ea4
SHA256
0372cece4ed670dba49fd1e6a774358dab546e6358aa158983643ea1edd6bd13
SHA512
c60cdad6b773e821ad1ca95e41f5733fa014cc8db2ba99b6053b14b072d53b36442b820d99fdd52cc59929f0a293315831054fa15b31b6ca8317f1f0d055f999
SSDEEP
768:r2yVqWQ63Iu95OZ3lL5UYEwxB6ftNE6qy0yfpJGn22f1f4X1iII+dB0lBChBPzR:rhVqWQPdZVLzx4VNELpgi20f4ImxR
Checks for missing Authenticode signature.
resource |
---|
0372cece4ed670dba49fd1e6a774358dab546e6358aa158983643ea1edd6bd13 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE