FlashBuf
GetDumperDLLName
GetDumperDLLVersion
InstallDumperDLL
LastKeyStr
PauseLog
UninstallDumperDLL
Static task
static1
Behavioral task
behavioral1
Sample
eca951ac3bb472f5fbcf844a11c3f2248af4c340fed974c7f50e12c6921fe3f1N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eca951ac3bb472f5fbcf844a11c3f2248af4c340fed974c7f50e12c6921fe3f1N.dll
Resource
win10v2004-20240802-en
Target
eca951ac3bb472f5fbcf844a11c3f2248af4c340fed974c7f50e12c6921fe3f1N
Size
33KB
MD5
dcca9bfa04d2ea205f76cfb8264a3d00
SHA1
330f295a9a3fdc8c12074e4e681e1d18c7bfce70
SHA256
eca951ac3bb472f5fbcf844a11c3f2248af4c340fed974c7f50e12c6921fe3f1
SHA512
b998fdb0617b96683e5067db0f37ed0b2979185a218dfb962c2c5b496ad0718db2f259d974aff1240031cf854fabfed2d5f286a1fd22c5a78b700c92f7219eb5
SSDEEP
768:X+/jMSE2YOXEP2zTXcp5PRvr9cqQlQtblVg7/AZvN:uwOzzD+pDC0tblu7Y
Checks for missing Authenticode signature.
resource |
---|
eca951ac3bb472f5fbcf844a11c3f2248af4c340fed974c7f50e12c6921fe3f1N |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
FlashBuf
GetDumperDLLName
GetDumperDLLVersion
InstallDumperDLL
LastKeyStr
PauseLog
UninstallDumperDLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ