?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
54fca22c59fda18773ec115886e6063b7c7b9b042202ef7fbd3367c2473b0f5f.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
54fca22c59fda18773ec115886e6063b7c7b9b042202ef7fbd3367c2473b0f5f.dll
Resource
win10v2004-20240412-en
Target
54fca22c59fda18773ec115886e6063b7c7b9b042202ef7fbd3367c2473b0f5f
Size
3KB
MD5
f407e5824949efd791e5b0004e076805
SHA1
c424fcfa5bbcc83786819b95cbf5ad6958815dd3
SHA256
54fca22c59fda18773ec115886e6063b7c7b9b042202ef7fbd3367c2473b0f5f
SHA512
bcd66dafe9b41131e820da8f827399c59f57c1d686f3f54b9396c464f6b73bf8c6d6c281be36df46296235baa01d0b5e9c1e5171ba100e9b234d690a43f2b91a
Checks for missing Authenticode signature.
resource |
---|
54fca22c59fda18773ec115886e6063b7c7b9b042202ef7fbd3367c2473b0f5f |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ