DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c59b0e176f9d62a378b3a5076c876385.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c59b0e176f9d62a378b3a5076c876385.dll
Resource
win10v2004-20240226-en
Target
c59b0e176f9d62a378b3a5076c876385
Size
89KB
MD5
c59b0e176f9d62a378b3a5076c876385
SHA1
c54c26145ddc06b52addc61523d028710e6d8237
SHA256
600c49d5e09a8ae01bc40a1de67d9c8874d2ddfb79c23f7080305987b8786ca5
SHA512
1cb93fa868e715b4235028643134e30690c4732086417bbf2be4a9e0775fca0cd9892809ccb395416cd6dcc3782d4608f81b5307d66cd8c5a852088a53341c94
SSDEEP
1536:U9akzWpbb0JWvLQvT32hLUiuTCaeBUdifOZPgFsFJ55rlsopPMghg57+kLUi+:0VzWpbgJWTG32hLI+aUUxZPgaFZrYjLs
Checks for missing Authenticode signature.
resource |
---|
c59b0e176f9d62a378b3a5076c876385 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE