DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c36fe4886564a2aa82641d57e4a09b90.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c36fe4886564a2aa82641d57e4a09b90.dll
Resource
win10v2004-20240226-en
Target
c36fe4886564a2aa82641d57e4a09b90
Size
80KB
MD5
c36fe4886564a2aa82641d57e4a09b90
SHA1
c9acf0026f5f4eee3e12358c1b7c61b0a3963c88
SHA256
e990a78944d3e0f663734960985bf1777caf4a9988d33a200108c95ffee47239
SHA512
941460318ce174e930218e340a08fdcccf0e29033d3979f79c01a65707f672a0cf9cec1ce92fe8df3d6d7c8d1068ab7b18caa1e515256f6b15ff5bd283fb36b6
SSDEEP
1536:TogYiLOwzebBNKkNtGikV12iUahB4WQztSCaYgwTvVViYP+WxQeL/veCicis0dER:rDsbKkTCxUa74ptSCafMLHGWKeb2CiHU
Checks for missing Authenticode signature.
resource |
---|
c36fe4886564a2aa82641d57e4a09b90 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE