DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
bfad7154251951e77f6d19d7e06ffb29.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bfad7154251951e77f6d19d7e06ffb29.dll
Resource
win10v2004-20240226-en
Target
bfad7154251951e77f6d19d7e06ffb29
Size
82KB
MD5
bfad7154251951e77f6d19d7e06ffb29
SHA1
d858c5dfcda34703e9c2c188d1082dc972fb9880
SHA256
917c53576c1f455fc87397de108caec920ff099467a782ab23927a842ea7f562
SHA512
4a876349100fd1cc7415ad432e1d461bac486c8fc0192d2a26d99d2637fd8507a0a09b88cedaaddda15c379b3268b2a7809e5345fb3aac7cf2a65bd5b142f593
SSDEEP
1536:M6kzwvtnwpQlEqU/WiQdxGVmSwYQif37zHPfpHP0MI8fonxx3APPHQdr:M6Ltw2Ev/7QdxGY5Yb3nHlP5sn0PHQdr
Checks for missing Authenticode signature.
resource |
---|
bfad7154251951e77f6d19d7e06ffb29 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE