DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d3c1b20328379c10bd316620fe23431e.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d3c1b20328379c10bd316620fe23431e.dll
Resource
win10v2004-20240226-en
Target
d3c1b20328379c10bd316620fe23431e
Size
90KB
MD5
d3c1b20328379c10bd316620fe23431e
SHA1
fcb524867cecf1128cbea9868b447ca49893a906
SHA256
f97d7e318e41ba12b73f61c666f4c6debfbb5f3c443dd2e109a1274c58764a07
SHA512
a8f96bc9031b9205362db681405689ad65e5129acda48689023de1051cd3e8a4279950d3982525b8cfa96bceff7dcff3be84f1957f1614ad8d7ba95d9327e345
SSDEEP
1536:zARGjS4wf/yvYjwI+DC8uMe9yUYlwIV5seEi0i+IBkcpz6R4ijo8R8uDzkoHNXOV:UsmPSvYT+/uiUiwIV5lEiY63ERPjQIHe
Checks for missing Authenticode signature.
resource |
---|
d3c1b20328379c10bd316620fe23431e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE