DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
cb438a07b4083a2a20e6fa5003ca4fce.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cb438a07b4083a2a20e6fa5003ca4fce.dll
Resource
win10v2004-20240226-en
Target
cb438a07b4083a2a20e6fa5003ca4fce
Size
87KB
MD5
cb438a07b4083a2a20e6fa5003ca4fce
SHA1
4ee7c78c7a8c972f44954915eb2077ed614051da
SHA256
540928c3bafd45e0bef6fea28d21e98a89d11fb803d8184f74fcde4675a743ca
SHA512
771b6e6664cbc945a237f1bb0786868f5162f6d26f45560537e15429bfd210d21a88bef817a5a8332e705ab8112dab6aca482871888234c601b97396dfc961cc
SSDEEP
1536:PpZZF/FtGGXPWi4mSaqGoO/T4sz4rbaZo5lXoUn/Bn8xg5iWqUy/HhrscQQ5teVj:RHF/7t/Wa7qGoE4szUbt//B8xd93Brsh
Checks for missing Authenticode signature.
resource |
---|
cb438a07b4083a2a20e6fa5003ca4fce |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE