DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
e13f754f1aa287d1237a0c9df16c060e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e13f754f1aa287d1237a0c9df16c060e.dll
Resource
win10v2004-20240226-en
Target
e13f754f1aa287d1237a0c9df16c060e
Size
120KB
MD5
e13f754f1aa287d1237a0c9df16c060e
SHA1
54a40ed3fa7d9500394b79e5b5df30b41555fa67
SHA256
a215ca5982ff89d65b7ccdb1bc6d25d12c1ed6e29ea3406ee1ef4bc624f8c384
SHA512
e91c19cacd45f57d9d3c08e9b8e254588e83e7c360fe85cf4ea8038b0a06e7755e6b3826be187c717877f5b39415be924702372ad83b6b2464df96e980e7ec69
SSDEEP
768:K5tayhq4QC+IcV4bbVPt8+5bKi5OZvdczmwwR8sWLN45YmvOHuZjdAWwCSXBJeUO:uhq4Qcemp3z5OZL8F45TOShAuSxJen
Checks for missing Authenticode signature.
resource |
---|
e13f754f1aa287d1237a0c9df16c060e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE