?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
5259f4cc6a02b41ec5a2dfab31f941ee2166d6d53426989526a733a1fb188a0b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5259f4cc6a02b41ec5a2dfab31f941ee2166d6d53426989526a733a1fb188a0b.dll
Resource
win10v2004-20240508-en
Target
5259f4cc6a02b41ec5a2dfab31f941ee2166d6d53426989526a733a1fb188a0b
Size
3KB
MD5
e8c0e999c1daf88d50d15dcd99d69585
SHA1
a2a55b570c0627c53fd55078c694c34ae8006442
SHA256
5259f4cc6a02b41ec5a2dfab31f941ee2166d6d53426989526a733a1fb188a0b
SHA512
b51d883cebc45613045f8d3838fa8788f822827c34f45ae3c162b4e3f10d72c0eb73c8a06424324d0d9ac066c721279a110544ccc8a07ff3ea44cd28c494a1ec
Checks for missing Authenticode signature.
resource |
---|
5259f4cc6a02b41ec5a2dfab31f941ee2166d6d53426989526a733a1fb188a0b |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ