DllCanUnloadNow
DllGetActivationFactory
Static task
static1
Behavioral task
behavioral1
Sample
CameraBarcodeScannerPreview.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
CameraBarcodeScannerPreview.exe
Resource
win10v2004-20230221-en
Target
CameraBarcodeScannerPreview.exe
Size
529KB
MD5
4ee408e0f7c59b9f472c4908336ffcd8
SHA1
0ee71069d85c0625c2ae5466dee6460364825fa3
SHA256
a7ac17698f7e9d0368a5287965507787a89048db25df84f79f09697bfb876198
SHA512
bc7cfbe16c26a60241cefda78c01e55e1830ac3bfc1b2225e42a4c71a180253d401600ac50f82e524b103476e883ffde2594a1d5e00d8ad14a76cb7409dbf722
SSDEEP
6144:X17sxtqiQ2xBt9HnFw7dF91UZ7B/rwCw6WdHiDoKOXY1H+Fcc9HqvDCzUH:XyuQpHnQrid/izCDo44tKvD
Checks for missing Authenticode signature.
resource |
---|
CameraBarcodeScannerPreview.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
TryAcquireSRWLockExclusive
InitializeSRWLock
LeaveCriticalSection
InitializeCriticalSectionEx
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateEventW
CoCreateFreeThreadedMarshaler
CoGetObjectContext
CoTaskMemAlloc
CoTaskMemFree
CoGetApartmentType
CoGetContextToken
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
GetModuleHandleExW
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
GetStartupInfoW
TerminateProcess
FormatMessageW
IsDebuggerPresent
DebugBreak
OutputDebugStringW
?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z
?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ
?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z
?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z
?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z
?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z
??0DisconnectedException@Platform@@QE$AAA@XZ
?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z
?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ
?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z
??0Delegate@Platform@@QE$AAA@XZ
?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z
??0ChangedStateException@Platform@@QE$AAA@XZ
?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z
??0OutOfBoundsException@Platform@@QE$AAA@XZ
??0FailureException@Platform@@QE$AAA@XZ
??0OutOfMemoryException@Platform@@QE$AAA@XZ
??0NotImplementedException@Platform@@QE$AAA@XZ
?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z
?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z
?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ
??0NullReferenceException@Platform@@QE$AAA@XZ
?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z
?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z
??0InvalidArgumentException@Platform@@QE$AAA@XZ
?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseWrongThreadException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?__abi_WinRTraiseCOMException@@YAXJ@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?InitializeData@Details@Platform@@YAJH@Z
?UninitializeData@Details@Platform@@YAXH@Z
?__abi_FailFast@@YAXXZ
?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z
?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z
?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z
??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z
?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z
?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ
??0Object@Platform@@QE$AAA@XZ
?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z
?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z
?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?Free@Heap@Details@Platform@@SAXPEAX@Z
?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z
wcscmp
wcslen
memset
_o___std_exception_destroy
_o___stdio_common_vsnprintf_s
_o___stdio_common_vswprintf
_o__callnewh
_o__cexit
_o__configthreadlocale
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__exit
_o__get_narrow_winmain_command_line
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_exe
_o__set_app_type
_o__set_fmode
_o__set_new_mode
_o__wcsnicmp
_o_abort
_o_exit
_o_free
_o_malloc
_o_terminate
_o_toupper
__CxxFrameHandler4
__std_terminate
wcsstr
wcsrchr
_CxxThrowException
__CxxFrameHandler3
__current_exception
__AdjustPointer
__processing_throw
__GetPlatformExceptionInfo
__C_specific_handler
_o___p__commode
_o___std_exception_copy
memcpy
memmove
SetRestrictedErrorInfo
RoFailFastWithErrorContext
RoOriginateError
RoReportUnhandledError
WindowsIsStringEmpty
WindowsDeleteString
WindowsCreateStringReference
WindowsCreateString
WindowsConcatString
WindowsCompareStringOrdinal
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsDuplicateString
DecodePointer
EncodePointer
InitOnceExecuteOnce
SleepConditionVariableSRW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
Sleep
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
IsProcessorFeaturePresent
UnhandledExceptionFilter
RaiseException
SetUnhandledExceptionFilter
GetLastError
SubmitThreadpoolWork
FreeLibraryWhenCallbackReturns
CloseThreadpoolWork
CreateThreadpoolWork
WideCharToMultiByte
QueryPerformanceCounter
CloseHandle
GetTickCount
GetSystemTimeAsFileTime
InitializeSListHead
EventWriteTransfer
EventProviderEnabled
EventSetInformation
EventUnregister
EventRegister
LocalAlloc
_register_thread_local_exe_atexit_callback
_initterm
_initterm_e
_c_exit
DllCanUnloadNow
DllGetActivationFactory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ