DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c4492ad0374cb1fa79246496ec46f560.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4492ad0374cb1fa79246496ec46f560.dll
Resource
win10v2004-20240226-en
Target
c4492ad0374cb1fa79246496ec46f560
Size
86KB
MD5
c4492ad0374cb1fa79246496ec46f560
SHA1
7f6a827467d3cd1eb030ff9951afd0162a2a0f6b
SHA256
e1e68ba623f2b2a820e5b7b56266d6db6830cb6140ba88d3905e0c86d57dd281
SHA512
1c531fcb4929bc1b9c878d40660f079fa116eb90ebbdbd9e0bdf402e78f8e99f401f22e3a2916f578d9a6a330ed17be8d02848ba8c184dbe2dfeb707c4c5be29
SSDEEP
1536:aEIOlUphIB8sD6QNTR3+EoGRLqFt1hyEBUE/C6EciGn6WuuFK9rkHl6us2fL/c/r:aEINIB8+tlJpLqX1sEBUkEciY93I2F8j
Checks for missing Authenticode signature.
resource |
---|
c4492ad0374cb1fa79246496ec46f560 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE