?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
979359bf2a5c2f96fe55f68f6cf3923650318bd6af57cf6c79775787892405a5N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
979359bf2a5c2f96fe55f68f6cf3923650318bd6af57cf6c79775787892405a5N.dll
Resource
win10v2004-20240802-en
Target
979359bf2a5c2f96fe55f68f6cf3923650318bd6af57cf6c79775787892405a5N.exe
Size
3KB
MD5
abdf42bedb3a830d9d2c46a7abe42030
SHA1
17bae09d7ee00805972b2cf7dc24d846fec3a0a7
SHA256
979359bf2a5c2f96fe55f68f6cf3923650318bd6af57cf6c79775787892405a5
SHA512
300a6bbc3ff79b854b83df11a65ddf607c7b6e2ef87860893484d930b8009b0d8bd155b820b16976668a4909a78f4812b0014705aa1a75bdafee8b9a64033ced
Checks for missing Authenticode signature.
resource |
---|
979359bf2a5c2f96fe55f68f6cf3923650318bd6af57cf6c79775787892405a5N.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ