?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
09e26bef095a7a3c850ece3ec71f9dd334d0b79c11d333437102d3e2923d1f4e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09e26bef095a7a3c850ece3ec71f9dd334d0b79c11d333437102d3e2923d1f4e.dll
Resource
win10v2004-20240426-en
Target
09e26bef095a7a3c850ece3ec71f9dd334d0b79c11d333437102d3e2923d1f4e
Size
3KB
MD5
7b4155f9e268c2fd4d6204d0e37d2899
SHA1
abb12235dea97449b645b472ce05ba25c6acbd40
SHA256
09e26bef095a7a3c850ece3ec71f9dd334d0b79c11d333437102d3e2923d1f4e
SHA512
fe12038dee7d521bd68ca3dfe0b26d9b049d291fdf89f32bd100bf756501a539b1702683c086dd041334b45d86f04c98210cde7221219b166ad5e8dd624de8ab
Checks for missing Authenticode signature.
resource |
---|
09e26bef095a7a3c850ece3ec71f9dd334d0b79c11d333437102d3e2923d1f4e |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ