?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
fb960f39dea0186ecd117d4c14ea4890N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fb960f39dea0186ecd117d4c14ea4890N.dll
Resource
win10v2004-20240802-en
Target
fb960f39dea0186ecd117d4c14ea4890N.exe
Size
3KB
MD5
fb960f39dea0186ecd117d4c14ea4890
SHA1
3e05615b23a656bd393c2b31fc350efe2c8bae8a
SHA256
b291c84d9b9e3fabf851c38202753cd9f4d5d14846c348c8a0932ccd48c8e189
SHA512
38d5325aae4c1e6da74198111cd0cef8cdce8f98bb2e2a66425eef5b70b9ee11ea35f00a9944b4a9176ba71400004ca4bb3d83062fcd0d107cac8cf0c8cdb155
Checks for missing Authenticode signature.
resource |
---|
fb960f39dea0186ecd117d4c14ea4890N.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ