DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
bd9c6c737293d4aeb7a7ef76a816d597.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd9c6c737293d4aeb7a7ef76a816d597.dll
Resource
win10v2004-20240226-en
Target
bd9c6c737293d4aeb7a7ef76a816d597
Size
88KB
MD5
bd9c6c737293d4aeb7a7ef76a816d597
SHA1
0239f545343dade2f5fa63a89c3141ea30f3733b
SHA256
03a64d8e5c0ab743064a4e892c9d759d63906db97be6489cbf280f2cc440bf33
SHA512
f96f3129d9191e6530218eda3c95a7ccce94c7be07366960f35cf24306869bb57319568386c2cfaab77f968248da145e9be87c3d8e5b4994ceaf95acf3b28381
SSDEEP
1536:kKxyB+cbhnwUjF4tA06KgQWSsz4rbaZo5lXoUn/Bn8xg5iWqUTzHwp7Z7BMkDAP0:kGu+cbFwU4hWSszUbt//B8xd9SQ7ykDP
Checks for missing Authenticode signature.
resource |
---|
bd9c6c737293d4aeb7a7ef76a816d597 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE