?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
a5668d838e0192f346749a2179be32313e487ea7d2de4b6846c04a084e487774N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a5668d838e0192f346749a2179be32313e487ea7d2de4b6846c04a084e487774N.dll
Resource
win10v2004-20240802-en
Target
a5668d838e0192f346749a2179be32313e487ea7d2de4b6846c04a084e487774N.exe
Size
3KB
MD5
be0da8830120def556a34313f1b17de0
SHA1
dff8aa30d634ed3cf40a5d19bb3f10e32814b76b
SHA256
a5668d838e0192f346749a2179be32313e487ea7d2de4b6846c04a084e487774
SHA512
a13c66e689f40c14bab97c6f3dc9caedd8eeafa66260d974c11c24e69c45f60be479290b421ab7d5d7bc292b45d8c314f30a8c2b78f0898e8645c9fe7c4a9eb8
Checks for missing Authenticode signature.
resource |
---|
a5668d838e0192f346749a2179be32313e487ea7d2de4b6846c04a084e487774N.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ