?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
0c187a26a71f259d518d8c1dd9b13967eb3bbc99a18e56faf0c8665422d92d0b.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c187a26a71f259d518d8c1dd9b13967eb3bbc99a18e56faf0c8665422d92d0b.dll
Resource
win10v2004-20240412-en
Target
0c187a26a71f259d518d8c1dd9b13967eb3bbc99a18e56faf0c8665422d92d0b
Size
3KB
MD5
686f6bbe5d5f2290de1109c34b7fa607
SHA1
a742633008a1b892ac3b71ff11c0ec31c0a5df58
SHA256
0c187a26a71f259d518d8c1dd9b13967eb3bbc99a18e56faf0c8665422d92d0b
SHA512
de9eb926e20dfd6d113bad254f4801697dd3f3f50a5533c1de585f223b6da9c00b50128cf02d4d47d5d6c9425c15812c7f8ebaeff4f8d9e1d1d7fe66eb621cce
Checks for missing Authenticode signature.
resource |
---|
0c187a26a71f259d518d8c1dd9b13967eb3bbc99a18e56faf0c8665422d92d0b |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ