?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
17880dcf752e2635c19c10429243883dcafbe4eb035a711081d5474ce8e53892.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17880dcf752e2635c19c10429243883dcafbe4eb035a711081d5474ce8e53892.dll
Resource
win10v2004-20240412-en
Target
17880dcf752e2635c19c10429243883dcafbe4eb035a711081d5474ce8e53892
Size
3KB
MD5
29cb963057bc87a5c0c05c599e06e003
SHA1
b8e4f2188601edbdf27970839e0d2c6bf454f2f7
SHA256
17880dcf752e2635c19c10429243883dcafbe4eb035a711081d5474ce8e53892
SHA512
764869b1db6087949a104c847396bc9f05c68b7bff2869114586373878e119482ff9b2cb57ce351733148bf69301c42c28d8c31b5b003eeab4e0e00c6b678abf
Checks for missing Authenticode signature.
resource |
---|
17880dcf752e2635c19c10429243883dcafbe4eb035a711081d5474ce8e53892 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ