DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
c88327659a4b49394d5c18a028072654.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c88327659a4b49394d5c18a028072654.dll
Resource
win10v2004-20240226-en
Target
c88327659a4b49394d5c18a028072654
Size
158KB
MD5
c88327659a4b49394d5c18a028072654
SHA1
1441186b234811b695e0acd3b8a68b99dc4a6b0f
SHA256
cc6fcba2ee912bc7309315dc843ea92be633fb07fc5ae2f00e49e83e564eee2c
SHA512
d0f8cd8ff6e55e38e255cf653e706c53323a0a8c21f9e667b41b45d6a933b662826f6b65d423508df038a558fd96390d04ad56cdffa0ef9a293441a39125b491
SSDEEP
1536:AHMNwBd7tWqn0Rdr1NH4C/eN3xCYJEFr3iSutNp/NgsJwkN1N:SMNwBd7tW/Rd3yhCYJEB3iScpFgsJ
Checks for missing Authenticode signature.
resource |
---|
c88327659a4b49394d5c18a028072654 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE