?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
1a156d1b02518114e5f3152d2a6bf8e5874b8d6d2e08eb1a8e4801e06f44831e.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a156d1b02518114e5f3152d2a6bf8e5874b8d6d2e08eb1a8e4801e06f44831e.dll
Resource
win10v2004-20240508-en
Target
1a156d1b02518114e5f3152d2a6bf8e5874b8d6d2e08eb1a8e4801e06f44831e
Size
3KB
MD5
c968eedc11810f5d9b6ce6b5864c7755
SHA1
20a26451138e4911eacd64ff15be67acfcde2738
SHA256
1a156d1b02518114e5f3152d2a6bf8e5874b8d6d2e08eb1a8e4801e06f44831e
SHA512
707ee5b119555b44b8786fc3d3a386d4ba222b97e0c2723315cf659764a0f697202c9ae0447124c75a7941ef8d7dda5e5ec6daf2daaeeff3303919e8159feb7f
Checks for missing Authenticode signature.
resource |
---|
1a156d1b02518114e5f3152d2a6bf8e5874b8d6d2e08eb1a8e4801e06f44831e |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ