DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
20b27f88e5995638a6c6dde4cce11d8f4fb3e8bcf44f0f58651ee585164f5ae3N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
20b27f88e5995638a6c6dde4cce11d8f4fb3e8bcf44f0f58651ee585164f5ae3N.dll
Resource
win10v2004-20240802-en
Target
20b27f88e5995638a6c6dde4cce11d8f4fb3e8bcf44f0f58651ee585164f5ae3N
Size
56KB
MD5
f14378c6993ee59ded1f0ac0c01c7da0
SHA1
9ae377ca2e0d452668bc3fc2abc5717e7ef81632
SHA256
20b27f88e5995638a6c6dde4cce11d8f4fb3e8bcf44f0f58651ee585164f5ae3
SHA512
3bc4fb32ce854e29fd6db4dc17e5b7d59c8629bec041b5e895a8f075b78298a256aaa081a49819907bf73a47e77dc41860d136a3c3000ee2358aeb229b3fab3b
SSDEEP
1536:l2xAIacr4N8oaJds2eaMUAmyn2Mjj9WV82gmDdwvUNZ5W:loacrFobNaMNnVjj96OmDdQwZ5W
Checks for missing Authenticode signature.
resource |
---|
20b27f88e5995638a6c6dde4cce11d8f4fb3e8bcf44f0f58651ee585164f5ae3N |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE