CheckCompileOptions
Compile
Static task
static1
Behavioral task
behavioral1
Sample
fil128B53456863CFA87ABF3FB7A10FFBAC.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fil128B53456863CFA87ABF3FB7A10FFBAC.dll
Resource
win10v2004-20230220-en
Target
fil128B53456863CFA87ABF3FB7A10FFBAC
Size
74.9MB
MD5
49783cd9e8554a5bb7518b5212ee64ca
SHA1
d906013d06223f1c782e6b738e279caefa221754
SHA256
983bb14813a75741bec2e8c83fbd5525c035273ba0016bface1755b260458783
SHA512
72d0e65101015f8bc15bd7a49ec78b9966b9ef49afb71301c306236fde506966e30441669672581fbdf1be9c3eef8bda18056c396c51053fa89332bba4abf62b
SSDEEP
786432:uoF7JoT0F/JRiNI8eRA9AkPMWuAX2jY/g/coAa6c:u07JoT0F/JRCInRUAkKjY/L9c
Checks for missing Authenticode signature.
resource |
---|
fil128B53456863CFA87ABF3FB7A10FFBAC |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
RegCloseKey
RegOpenKeyExA
RegGetValueW
RegEnumKeyExA
RegQueryValueExW
LockResource
SizeofResource
FindResourceA
CloseHandle
RaiseException
WaitForSingleObject
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetFileType
WriteConsoleW
GetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceExA
GetDriveTypeW
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetVolumePathNameW
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
DuplicateHandle
GetLastError
SetLastError
Sleep
GetCurrentProcess
GetSystemInfo
GetSystemTime
VirtualQuery
CreateFileMappingW
MapViewOfFile
GetModuleHandleExA
GetModuleFileNameW
MoveFileExW
CreateHardLinkW
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetCommandLineW
FindFirstFileW
GetLongPathNameW
SetErrorMode
GetProcessTimes
GetNativeSystemInfo
GetModuleHandleW
GetProcAddress
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetConsoleMode
SetConsoleMode
SearchPathW
TerminateProcess
GetExitCodeProcess
CreateProcessW
CreateJobObjectW
AssignProcessToJobObject
SetInformationJobObject
LocalFree
FormatMessageA
RtlCaptureContext
ExpandEnvironmentStringsW
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThread
LoadLibraryW
SetConsoleCtrlHandler
FreeLibrary
K32EnumProcessModulesEx
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
VirtualProtect
LoadLibraryExA
RtlCaptureStackBackTrace
HeapSize
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
LoadResource
UnmapViewOfFile
FormatMessageW
RtlPcToFileHeader
EncodePointer
DecodePointer
WaitForSingleObjectEx
GetExitCodeThread
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSectionAndSpinCount
CreateEventW
GetSystemTimeAsFileTime
GetTickCount
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualFree
SetProcessAffinityMask
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
RtlUnwindEx
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitThread
ResumeThread
GetModuleHandleExW
SetStdHandle
SetFilePointerEx
ExitProcess
SetEndOfFile
HeapValidate
HeapWalk
HeapAlloc
HeapFree
HeapReAlloc
GetModuleFileNameA
WriteFile
GetConsoleCP
ReadFile
ReadConsoleW
OutputDebugStringA
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetACP
GetFullPathNameW
GetFullPathNameA
GetTimeZoneInformation
GetProcessHeap
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
SetErrorInfo
VariantChangeType
VariantClear
SysFreeString
SysStringByteLen
SysAllocStringByteLen
GetErrorInfo
CreateErrorInfo
VariantInit
CheckCompileOptions
Compile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ