?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
6b3c73ea3642ec757ff96812c998a84bd45f899a78403bfbb7a3b903291eb0f4.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
6b3c73ea3642ec757ff96812c998a84bd45f899a78403bfbb7a3b903291eb0f4.dll
Resource
win10v2004-20240508-en
Target
6b3c73ea3642ec757ff96812c998a84bd45f899a78403bfbb7a3b903291eb0f4
Size
3KB
MD5
7a17c1c31a75d2e795600f6997c692a2
SHA1
bde41ced8e459bba1458c6909c75cb07d8070b06
SHA256
6b3c73ea3642ec757ff96812c998a84bd45f899a78403bfbb7a3b903291eb0f4
SHA512
7ffe862e148bf8112c98b4a8998a39af9030bdb0920c641c375282a517d3386cc889ccfd55680932acfb829e081c90d49268e9094a8fa496564550a4cfe37ad7
Checks for missing Authenticode signature.
resource |
---|
6b3c73ea3642ec757ff96812c998a84bd45f899a78403bfbb7a3b903291eb0f4 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ