?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
e1f145651db108d1040ee3adcf54a5db6f8cdcf8bfce278ca41f6362891b06f0.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e1f145651db108d1040ee3adcf54a5db6f8cdcf8bfce278ca41f6362891b06f0.dll
Resource
win10v2004-20240611-en
Target
e1f145651db108d1040ee3adcf54a5db6f8cdcf8bfce278ca41f6362891b06f0
Size
3KB
MD5
fd564b23bc343e3b56aaff2b5d75c6bb
SHA1
d93de4af4b0cb7d4286d5bc6890d0c7840bb33b2
SHA256
e1f145651db108d1040ee3adcf54a5db6f8cdcf8bfce278ca41f6362891b06f0
SHA512
4b599d3e2920547b2b20d4e7b050714987d53eae98546c1f5fdaade52496e3cfbc08c9f4ac9295a5eb6604152185223782ff86d3c885438e09f9bb5e62faceb1
Checks for missing Authenticode signature.
resource |
---|
e1f145651db108d1040ee3adcf54a5db6f8cdcf8bfce278ca41f6362891b06f0 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ