?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
64524e61b7650c790b7454b2262ad209bc0692bd8a79727b9b951bedb580d580.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64524e61b7650c790b7454b2262ad209bc0692bd8a79727b9b951bedb580d580.dll
Resource
win10v2004-20240226-en
Target
64524e61b7650c790b7454b2262ad209bc0692bd8a79727b9b951bedb580d580
Size
3KB
MD5
f01bf95d1b5412b0dc4492040a649a56
SHA1
235136e5f2d21286d036f1cdb6dbe66123617a93
SHA256
64524e61b7650c790b7454b2262ad209bc0692bd8a79727b9b951bedb580d580
SHA512
b4d923b2eb58b6c9112ad2ea27780e1a3f07dee757693a8eccbdd4099d69b22b8b8de35942a48d1a189cdd841ba3403dd9a20603d57281288806fca6cc4fe135
Checks for missing Authenticode signature.
resource |
---|
64524e61b7650c790b7454b2262ad209bc0692bd8a79727b9b951bedb580d580 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ