DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c44e8d5c8eb43487a0386dbbfcf868f5.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c44e8d5c8eb43487a0386dbbfcf868f5.dll
Resource
win10v2004-20240226-en
Target
c44e8d5c8eb43487a0386dbbfcf868f5
Size
86KB
MD5
c44e8d5c8eb43487a0386dbbfcf868f5
SHA1
a6349034df86a2847ad655bed42a118fa4e6c2c7
SHA256
6eb6cc06388ce4f4b1acd2a1eb94d2f16254c961c125c62af3076713f795bc70
SHA512
31e81c03075e5d8935929b37fb5c8cec9c3dd9840717e0113a14adbd386fd8447a56b2a097b0181709754c767adc5cf632be595ec4930b5df8536596b244dedb
SSDEEP
1536:tXz77c04GZ6CtHxWdLQSI7zx+Q1rl+gGc8EyXpRNwI6eFeWWSgj31r7sXKb/F1Hd:NQK6C5xWdLQSI7zQQBljupRn6Jlv/Hxn
Checks for missing Authenticode signature.
resource |
---|
c44e8d5c8eb43487a0386dbbfcf868f5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE