?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
3464e9f3fdd50cdba2a6ac90b9a1edcd54a4a821ec6afab10950887dd11b2d1c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3464e9f3fdd50cdba2a6ac90b9a1edcd54a4a821ec6afab10950887dd11b2d1c.dll
Resource
win10v2004-20240226-en
Target
3464e9f3fdd50cdba2a6ac90b9a1edcd54a4a821ec6afab10950887dd11b2d1c
Size
3KB
MD5
b15a70fe1fc4fab84688a450e830ed02
SHA1
b0b381e5e758e5455c339468f5868361250fb247
SHA256
3464e9f3fdd50cdba2a6ac90b9a1edcd54a4a821ec6afab10950887dd11b2d1c
SHA512
e50bd4293ddfdc0aa4e4e710ce9879a88fdfc55eb95c7b05497194cc73fa4bb8cba2e9dd713b68fc8d89d01c72f0c195514c96ee6cdf2c4bd5e3c0afa5ae07bb
Checks for missing Authenticode signature.
resource |
---|
3464e9f3fdd50cdba2a6ac90b9a1edcd54a4a821ec6afab10950887dd11b2d1c |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ