?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
79a10491c163ca34b595f727ef6638323f9626ad5a386b7db869ed6d6744ed3d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
79a10491c163ca34b595f727ef6638323f9626ad5a386b7db869ed6d6744ed3d.dll
Resource
win10v2004-20240426-en
Target
79a10491c163ca34b595f727ef6638323f9626ad5a386b7db869ed6d6744ed3d
Size
3KB
MD5
aa8be15dba8b8686e0ca014d276d4b54
SHA1
476bec846be52fe126795308e395a53ae8df4d46
SHA256
79a10491c163ca34b595f727ef6638323f9626ad5a386b7db869ed6d6744ed3d
SHA512
b7ea238e43d05705e2ad3706f39b2a792b8497b6493243d521af9bc817086f52fe93bb2875a679e3ddaaac344c9d11447bd7d7aa94615effafc3d5bef71bb0c0
Checks for missing Authenticode signature.
resource |
---|
79a10491c163ca34b595f727ef6638323f9626ad5a386b7db869ed6d6744ed3d |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ