?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
02cb78dc3a777239b03910c670569372ffd38e04157465dd2ce84599d95f6f3a.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02cb78dc3a777239b03910c670569372ffd38e04157465dd2ce84599d95f6f3a.dll
Resource
win10v2004-20240412-en
Target
02cb78dc3a777239b03910c670569372ffd38e04157465dd2ce84599d95f6f3a
Size
3KB
MD5
3536939607577973d1f3dad99899008a
SHA1
41f1d3caf17691dba9a02e75f4da2f3fad27e521
SHA256
02cb78dc3a777239b03910c670569372ffd38e04157465dd2ce84599d95f6f3a
SHA512
083dc059971e60fe16ae84d35ae04c0ec07c650fb14dad5e2bd47ddfbdf62ea4a4bb32843c1f615a24df79ff3e8e4475dd92a6d31088539b9cc97170fe776257
Checks for missing Authenticode signature.
resource |
---|
02cb78dc3a777239b03910c670569372ffd38e04157465dd2ce84599d95f6f3a |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ