?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
5de3f2291294cb577d28558a0b25b8c8f520cca19439700813c9172075c994df.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5de3f2291294cb577d28558a0b25b8c8f520cca19439700813c9172075c994df.dll
Resource
win10v2004-20240508-en
Target
5de3f2291294cb577d28558a0b25b8c8f520cca19439700813c9172075c994df
Size
3KB
MD5
4061f40ad771aff7b996c5e298855811
SHA1
7093f9baacf345554babae719b283c379eefef59
SHA256
5de3f2291294cb577d28558a0b25b8c8f520cca19439700813c9172075c994df
SHA512
179985e5001244dfdee90a90c4ecf2085482da4f2b7ca1312a555c07a0cae888d6ca0fbae46f0b25c169bb8e02b896fe66d87aba339d689e03755bb5570f8af6
Checks for missing Authenticode signature.
resource |
---|
5de3f2291294cb577d28558a0b25b8c8f520cca19439700813c9172075c994df |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ