DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e09f1c626fcbc145dc1bf5f90dfc4dff.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e09f1c626fcbc145dc1bf5f90dfc4dff.dll
Resource
win10v2004-20240226-en
Target
e09f1c626fcbc145dc1bf5f90dfc4dff
Size
82KB
MD5
e09f1c626fcbc145dc1bf5f90dfc4dff
SHA1
850b740a9f0bfa4a9a7f1789cd7ac2c4b0199335
SHA256
4eb17c8803282a0cbdcb3a2a13c2db72ebab4b053e243fe882a29c8f1466143e
SHA512
df661b8fe308acefb9bfc1d0f5535406aef107903e7fa11689b092efed4e380527c2e0631673041a9b3ac3b7cc71dea42c4f796e74550a51e5b99e20095a7fde
SSDEEP
1536:Hz+fKo51fKuAdv1J8neEOYAQ0haOHw0cOhmkjnncjeJOy/9hbexhKxnn0:HpoC3iOfQ0htQr4mkjnnz3/3Jx0
Checks for missing Authenticode signature.
resource |
---|
e09f1c626fcbc145dc1bf5f90dfc4dff |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE