DrvDisableDriver
DrvEnableDriver
DrvQueryDriverInfo
DrvResetConfigCache
GenerateCopyFilePaths
SpoolerCopyFileEvent
Static task
static1
Behavioral task
behavioral1
Sample
mimispool.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
mimispool.dll
Resource
win10v2004-20230220-en
Target
mimispool.dll
Size
10KB
MD5
c6cc0def7d584f431d69126c1cc33a20
SHA1
ea2646a646662909cd2bf5443e6b0030fb3cc6eb
SHA256
66928c3316a12091995198710e0c537430dacefac1dbe78f12a331e1520142bd
SHA512
17199e1be5d40744ae92d5d1b143645fcd0e413b92696fdaeb673785549bf20f4952a19887fe5c14cddbdfa435320a79044510d0de4e2c52fa26a1d2bfd83826
SSDEEP
192:DGMoIQaZcsBTSWoH6DlI0zPQ4Ib/me0C0uolZC7:VJxgWFlVC50C0uols
Checks for missing Authenticode signature.
resource |
---|
mimispool.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CreateProcessAsUserW
SetTokenInformation
DuplicateTokenEx
OpenProcessToken
DestroyEnvironmentBlock
CreateEnvironmentBlock
WinStationEnumerateW
WinStationFreeMemory
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
GetCurrentProcess
SetLastError
CloseHandle
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetSystemTimeAsFileTime
memset
__C_specific_handler
_XcptFilter
malloc
free
_amsg_exit
_initterm
DrvDisableDriver
DrvEnableDriver
DrvQueryDriverInfo
DrvResetConfigCache
GenerateCopyFilePaths
SpoolerCopyFileEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ