?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
0af57013a0a97c42df8a2a4e7dbb637301662e395cb8ec99f8044b4e9081db0f.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0af57013a0a97c42df8a2a4e7dbb637301662e395cb8ec99f8044b4e9081db0f.dll
Resource
win10v2004-20240611-en
Target
0af57013a0a97c42df8a2a4e7dbb637301662e395cb8ec99f8044b4e9081db0f
Size
3KB
MD5
8a6e45a3dc737d61124fe90a58c0612a
SHA1
15966425fc46cf2ffb0250298625c1349948b968
SHA256
0af57013a0a97c42df8a2a4e7dbb637301662e395cb8ec99f8044b4e9081db0f
SHA512
637463456a1c84c9577f3f2fb8416cb8d9b843a0646888b3b076d2d92b648dc21bddb836fe57c2049a20ed9d2d56b64b0e2401bc1f07a3bf8013be1f01209e48
Checks for missing Authenticode signature.
resource |
---|
0af57013a0a97c42df8a2a4e7dbb637301662e395cb8ec99f8044b4e9081db0f |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ