DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
e18c8636573b7ed580c17aa8bf5f8979.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e18c8636573b7ed580c17aa8bf5f8979.dll
Resource
win10v2004-20240226-en
Target
e18c8636573b7ed580c17aa8bf5f8979
Size
140KB
MD5
e18c8636573b7ed580c17aa8bf5f8979
SHA1
7df6206152313a2330e86c726a71fb42fd2db60f
SHA256
fc30618464e4baba3b9ff3b0459074336d387e0f248f7e90dbe58ebc12ec1a0d
SHA512
21c4aac57bc760a0ebbe7bd076c361483bbd3fc77efa06fc31b9f984fe8fbcb44ed02713dfb15b8a2413ae358b0419f4ff87627a7837971e350fdb1f2ffec819
SSDEEP
1536:3LA3YPPusG33CTAii/XUCxX/6KFCsRPF0h8k79Pl5E0HW6KeqGu/qVFeB7hix:3MoPPiHN/UCp60RPFidkGqcVFw0x
Checks for missing Authenticode signature.
resource |
---|
e18c8636573b7ed580c17aa8bf5f8979 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE