?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
5079bd9819a76e7c228c452dc6ce256792a57a3580bd27f1e71bc976c3dd9f47.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5079bd9819a76e7c228c452dc6ce256792a57a3580bd27f1e71bc976c3dd9f47.dll
Resource
win10v2004-20240426-en
Target
5079bd9819a76e7c228c452dc6ce256792a57a3580bd27f1e71bc976c3dd9f47
Size
3KB
MD5
8adb122ed9296671a47dd9222b0c6468
SHA1
903f74fe77d5ee240afc067ee83b1566e731e9f2
SHA256
5079bd9819a76e7c228c452dc6ce256792a57a3580bd27f1e71bc976c3dd9f47
SHA512
3c64e24d984c2ccc89542ee9f69922eabc1dc3da72b2d958737dfe3d9fe2efee024864198f6df8858b6e8305fea38ecec5eb5930f87e2e9002026cdf58bfba82
Checks for missing Authenticode signature.
resource |
---|
5079bd9819a76e7c228c452dc6ce256792a57a3580bd27f1e71bc976c3dd9f47 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ