?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
885ba8b9b6bbbe1ced5ab945e0b1750af1ebbdb55f6dffecf7cd28f4af5f396f.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
885ba8b9b6bbbe1ced5ab945e0b1750af1ebbdb55f6dffecf7cd28f4af5f396f.dll
Resource
win10v2004-20240611-en
Target
885ba8b9b6bbbe1ced5ab945e0b1750af1ebbdb55f6dffecf7cd28f4af5f396f
Size
3KB
MD5
707e90dfc030eaba0e8e30a45e6c3179
SHA1
e5593f51d0327cb0c7869a6175211164dd948df3
SHA256
885ba8b9b6bbbe1ced5ab945e0b1750af1ebbdb55f6dffecf7cd28f4af5f396f
SHA512
831b84e7d8f5e359a3abf9518fe61954fb3523d03f4980e888a4958fb6ed0992d027358efacb9fef9ce6d4b9d75555f6bb2e6cda463bf7a64c0e39f7e2911ec2
Checks for missing Authenticode signature.
| resource |
|---|
| 885ba8b9b6bbbe1ced5ab945e0b1750af1ebbdb55f6dffecf7cd28f4af5f396f |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ