DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
df4d418af6c0735bf45d8766ed4a554e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df4d418af6c0735bf45d8766ed4a554e.dll
Resource
win10v2004-20240226-en
Target
df4d418af6c0735bf45d8766ed4a554e
Size
167KB
MD5
df4d418af6c0735bf45d8766ed4a554e
SHA1
545ad2ab9d8bd432caf8287f00b63199bd62d317
SHA256
52ebdee399c01fec9d774e35cd0ecb8868725b76b9e70c58fca8a5a291fea647
SHA512
184ad4236f5340246c8d1c3d241efb75a17f2a2cb671310992684eabed2e98b26d67dd4a5e09d519adc4fc445ac6f2cf76bafefc8c9004d43bddb85c94e371fa
SSDEEP
1536:dYuMjeditUY+fNK2u6b/khkmqKXmMrCGNOWK9JhFVKiYuomuVh/9zaCXm:ddMjedxVw2u6LZKFCzx9vFV7w/JF
Checks for missing Authenticode signature.
resource |
---|
df4d418af6c0735bf45d8766ed4a554e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE