?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
a40a803e6a59456fb01fc0d995650a1dff7c96f7b11083116a2daafc7874c782.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a40a803e6a59456fb01fc0d995650a1dff7c96f7b11083116a2daafc7874c782.dll
Resource
win10v2004-20240412-en
Target
a40a803e6a59456fb01fc0d995650a1dff7c96f7b11083116a2daafc7874c782
Size
3KB
MD5
2aaf4bbbe2c261b330c69e6498e0e286
SHA1
5c16350a290982fa861f2b8b6c8fca2bc99cf2de
SHA256
a40a803e6a59456fb01fc0d995650a1dff7c96f7b11083116a2daafc7874c782
SHA512
a668d1a8fdca8229551f43242ac0c6a5dd654ccf92db1b6a82c7d69386341f678b5b49c2d928bce24e006c9e40d54eee1b995d04e5145c6536f6ebf7b2201a64
Checks for missing Authenticode signature.
resource |
---|
a40a803e6a59456fb01fc0d995650a1dff7c96f7b11083116a2daafc7874c782 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ