DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
d61132041c797c227b5bdd8f2e6178b9.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d61132041c797c227b5bdd8f2e6178b9.dll
Resource
win10v2004-20240226-en
Target
d61132041c797c227b5bdd8f2e6178b9
Size
85KB
MD5
d61132041c797c227b5bdd8f2e6178b9
SHA1
824d38b2cbb3a73e50e18d213bc934788c54629c
SHA256
e3268e42c24041b87a9536524ed01183cdb940f657847e42299f07dca8b6f0e3
SHA512
e03ca867a14a3bf765fb69277d48ee77919b3119258ef1bde47b2ff2c1b7f36f2e236696612b0dd6c2fe2b30bbc4e65eae8053b045db21d2941f493c9f648858
SSDEEP
1536:efWbkamHHu5KdxHjYl5Ofe9m3bCvvyOPj5mEJp4f5enBb1fc4jm:efWbkvOQc2fekGSGjd6fMPfcJ
Checks for missing Authenticode signature.
resource |
---|
d61132041c797c227b5bdd8f2e6178b9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE