?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
6d2a52f61259906b3ab486869a03926c5646bc232d86c869e7d2640381ebac59.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6d2a52f61259906b3ab486869a03926c5646bc232d86c869e7d2640381ebac59.dll
Resource
win10v2004-20240412-en
Target
6d2a52f61259906b3ab486869a03926c5646bc232d86c869e7d2640381ebac59
Size
3KB
MD5
cc231ff40e972d085c875972115d9e7d
SHA1
a4f9adac2d656465f78dc6e7ebdfd5de646ac0a6
SHA256
6d2a52f61259906b3ab486869a03926c5646bc232d86c869e7d2640381ebac59
SHA512
cecb21ee09ca576e748ba4c25426dcfe1535a9223f6c8c844561a623b69668f2f071eeac80f431d0a41aa9b9e8b0f510719cd00a6e641be39bf108aeb5365877
Checks for missing Authenticode signature.
resource |
---|
6d2a52f61259906b3ab486869a03926c5646bc232d86c869e7d2640381ebac59 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ