?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
b81a4026687f2f6f9a6a7b0110a0ad049ae84329868fa875360560ebb2de3573.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b81a4026687f2f6f9a6a7b0110a0ad049ae84329868fa875360560ebb2de3573.dll
Resource
win10v2004-20240508-en
Target
b81a4026687f2f6f9a6a7b0110a0ad049ae84329868fa875360560ebb2de3573
Size
3KB
MD5
a2d71b619d70009d4f4d06955de91152
SHA1
c1a2afa32d5b61074a62fbe6af02bab0d227affb
SHA256
b81a4026687f2f6f9a6a7b0110a0ad049ae84329868fa875360560ebb2de3573
SHA512
86a1a27d87d64b6718acfabca8106e82a74cee440c990b62c58e639761e824caa0c63a8c5157163d62d2a2834e6ec0afd48883b58bf4b569225cbeb40b399aaa
Checks for missing Authenticode signature.
resource |
---|
b81a4026687f2f6f9a6a7b0110a0ad049ae84329868fa875360560ebb2de3573 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ