?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
d6f849db445ef6ab3106c4b983f25489bbe2eb8bd2ae6b9242a6c24ca5fe7b61.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d6f849db445ef6ab3106c4b983f25489bbe2eb8bd2ae6b9242a6c24ca5fe7b61.dll
Resource
win10v2004-20240226-en
Target
d6f849db445ef6ab3106c4b983f25489bbe2eb8bd2ae6b9242a6c24ca5fe7b61
Size
3KB
MD5
0d5445227afdae1e186c47d71e294161
SHA1
e18c8859ab6d829bbd8942893c0d1617ac5dbeac
SHA256
d6f849db445ef6ab3106c4b983f25489bbe2eb8bd2ae6b9242a6c24ca5fe7b61
SHA512
932469f1a9715d2f20e2fb52aaaee932a49406d8b37a04f941ed81bb38ac55df459e2bf665303aca84dcf64c4ed682486501985a226093d273dd0dd95522fac8
Checks for missing Authenticode signature.
resource |
---|
d6f849db445ef6ab3106c4b983f25489bbe2eb8bd2ae6b9242a6c24ca5fe7b61 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ