DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c12c643d5380d62bf6aad9e565c6d11e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c12c643d5380d62bf6aad9e565c6d11e.dll
Resource
win10v2004-20240226-en
Target
c12c643d5380d62bf6aad9e565c6d11e
Size
86KB
MD5
c12c643d5380d62bf6aad9e565c6d11e
SHA1
fe1e5aa16de1e130ae7faf7837c3ae5bdbb4686e
SHA256
49f90183526e0c11ca83a6d1b8594be59ee423cfea2bec2163522d34766073a5
SHA512
ec68ad3694366cbce5b6fd6f62aceca605b696af43042461f6f4983abdf511b793d02080acf596db9ea84d789a4a4c90bf499450d1fc7a14e3d1ca3c03f9486b
SSDEEP
1536:MrpnkPpOuY8qkSPV8tsz4rbaZo5lXoUn/Bn8xg5iWqUrCjffSnGbz1i4RMM:MrpkxlY8XlszUbt//B8xd9g6fjNhj
Checks for missing Authenticode signature.
resource |
---|
c12c643d5380d62bf6aad9e565c6d11e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE