DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e1867c0e3fe6d1c6e0e380f8758ef2d0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e1867c0e3fe6d1c6e0e380f8758ef2d0.dll
Resource
win10v2004-20240226-en
Target
e1867c0e3fe6d1c6e0e380f8758ef2d0
Size
84KB
MD5
e1867c0e3fe6d1c6e0e380f8758ef2d0
SHA1
2403b6b8a72fd89907210ac08d053bdc5218fed8
SHA256
abfe9d6877196223cd7f7f96f5030c74be6d396e047f3bcffb9586d252d600ae
SHA512
f8c7e0880511748eb91474ff38e3e6c60054353b30db30efee6796c9f28a493266a46680a2e07a4782ada84f3807289b253521aad143aba280c7cf3da6792461
SSDEEP
1536:mV+2EkdauJscLt241FnRUNOQRPF0h8k79Pl5E0HW6bjGYnNUifZudu1K:E+ILJsot24TqNOQRPFidk+tnqihuuQ
Checks for missing Authenticode signature.
resource |
---|
e1867c0e3fe6d1c6e0e380f8758ef2d0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE