DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c0c11d9860b5cc431ce7646fa9c81ea3.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0c11d9860b5cc431ce7646fa9c81ea3.dll
Resource
win10v2004-20240226-en
Target
c0c11d9860b5cc431ce7646fa9c81ea3
Size
66KB
MD5
c0c11d9860b5cc431ce7646fa9c81ea3
SHA1
487783e6431c7b10a3075145e213521ddcc12232
SHA256
754e8dbc36cc233f9fb046a162367da005732e6d477d6fa7e9bc4254d2583164
SHA512
a633af2a97221a07943088e52dc622468ebdcc7bfee64c0f89ac28a2f09fe1858c3479c7e56bc2dc880c7e659920fdc1e5f29adb6c4e3b27720ccf2281b9f929
SSDEEP
1536:7MesVWaJk/hKXwFXw3mxeHi/rqIdJKkFc4w8ZPe87W0eRhso:7MbVG/hKX0UfC/rtPFc4TxLWDio
Checks for missing Authenticode signature.
resource |
---|
c0c11d9860b5cc431ce7646fa9c81ea3 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE