?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
bf37c171b420b3eb4f07408e3a1558c74eb47d6f3e8dad6d7d40114636706229.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bf37c171b420b3eb4f07408e3a1558c74eb47d6f3e8dad6d7d40114636706229.dll
Resource
win10v2004-20240508-en
Target
bf37c171b420b3eb4f07408e3a1558c74eb47d6f3e8dad6d7d40114636706229
Size
3KB
MD5
7652063c28f6e13da6548585482016a3
SHA1
5d482f57df06d69eed1d0a07e287de7632038602
SHA256
bf37c171b420b3eb4f07408e3a1558c74eb47d6f3e8dad6d7d40114636706229
SHA512
21a82f16147974212abbae7c90de5cadee62b75346a928115ed4dc986ec35ef2fb55e84d02997a0da588324eb5292c4dda599ddf6463db7ef8b0e7db71d1f2a7
Checks for missing Authenticode signature.
Processes:
resource |
---|
bf37c171b420b3eb4f07408e3a1558c74eb47d6f3e8dad6d7d40114636706229 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ