?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
6a8f7579d647335a71fc52214c8be100N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a8f7579d647335a71fc52214c8be100N.dll
Resource
win10v2004-20240709-en
Target
6a8f7579d647335a71fc52214c8be100N.exe
Size
3KB
MD5
6a8f7579d647335a71fc52214c8be100
SHA1
f7d3d7ce34dc656f002cbd8e75cd5997430863d1
SHA256
75126e6477f8df1cafa13eb3fb7f331b7d37ffd46943859daada39a8cb1ec245
SHA512
25489fc08fc8583e654783bc0d4474a93a05849697b06108c8fca0627359d4c3bd2b1fae78b419205284d74fdc774f87575b1c161570dad0bd6cc50b32fadc60
Checks for missing Authenticode signature.
resource |
---|
6a8f7579d647335a71fc52214c8be100N.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ