?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
5fb98b0b738929c3cb0fdeef1e64245d217d8b63152f1dc96f6f56764de84bcdN.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5fb98b0b738929c3cb0fdeef1e64245d217d8b63152f1dc96f6f56764de84bcdN.dll
Resource
win10v2004-20240802-en
Target
5fb98b0b738929c3cb0fdeef1e64245d217d8b63152f1dc96f6f56764de84bcdN.exe
Size
3KB
MD5
b6c7162558f1f3f2012dc3b853d7b6b0
SHA1
91e4cf3a1e8d2d08a19f5484dce26d51a0cae837
SHA256
5fb98b0b738929c3cb0fdeef1e64245d217d8b63152f1dc96f6f56764de84bcd
SHA512
e8f9b00b2e784b6a3a0991989c617e8e3bd50e4d6ed5464ed30860451942b2f9af1d143ca4e0252fc21a0c0c16eaab6c6986fdbc0598ebc0dc3926de6ef7f2e4
Checks for missing Authenticode signature.
resource |
---|
5fb98b0b738929c3cb0fdeef1e64245d217d8b63152f1dc96f6f56764de84bcdN.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ