DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ddee1a68509fa9320d3dbcdc21490104.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ddee1a68509fa9320d3dbcdc21490104.dll
Resource
win10v2004-20240226-en
Target
ddee1a68509fa9320d3dbcdc21490104
Size
87KB
MD5
ddee1a68509fa9320d3dbcdc21490104
SHA1
78246de5b798606352a2b94d3d96784188b0a38f
SHA256
9dd737c5214a47797a032adc9512d53ef75ccc49f00d8504c7816a41f4c28b1e
SHA512
bd45b5eafeb3a414263b63a604675a7cc42bb96f991b593bb030086a48420995ffa0ce5c028013535b2318801c5a032b81c5882703d67069f7a381f5ee640cd6
SSDEEP
1536:sSQGmc/yBAercF9oIj+yeKbnwrWiUWmBry2dTNQ9OY/FUerl/+3fCytpb3XVHlz6:syqVOJ+XKbnwyXWaWsiOY/FUml/+3a2C
Checks for missing Authenticode signature.
resource |
---|
ddee1a68509fa9320d3dbcdc21490104 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE