?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
Static task
static1
Behavioral task
behavioral1
Sample
1ceb7213e04c540304aba80f663c96a4456e955bb6591b3a8b1a61ac5d0d9f03N.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
1ceb7213e04c540304aba80f663c96a4456e955bb6591b3a8b1a61ac5d0d9f03N.dll
Resource
win10v2004-20241007-en
Target
1ceb7213e04c540304aba80f663c96a4456e955bb6591b3a8b1a61ac5d0d9f03N
Size
3KB
MD5
29a74da3e7dc3de197b30b0922ae0b40
SHA1
312f857e4a4441a29b11d2fc2790e5ce391e4b3a
SHA256
1ceb7213e04c540304aba80f663c96a4456e955bb6591b3a8b1a61ac5d0d9f03
SHA512
b24d9015dd82e33b206cfe55485a681c168f4b26af6536ded57e0595df8d702f69031d2d13f367e4232941246562554b4cd01cca8a48b04ec699d2718b28837e
Checks for missing Authenticode signature.
resource |
---|
1ceb7213e04c540304aba80f663c96a4456e955bb6591b3a8b1a61ac5d0d9f03N |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ