InitDgBaseModle
QM_BLOCKDll
Static task
static1
Behavioral task
behavioral1
Sample
41d26966b3166121e764c785cd1febbb97b5a54bb5e3a635cb3ffc23e80485d4.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
41d26966b3166121e764c785cd1febbb97b5a54bb5e3a635cb3ffc23e80485d4.dll
Resource
win10v2004-20230220-en
Target
41d26966b3166121e764c785cd1febbb97b5a54bb5e3a635cb3ffc23e80485d4
Size
169KB
MD5
c044d0f6d8f5a0d594cf867d0162db88
SHA1
ea2b71f419b10d5dfe0ad6a0d6cfd172f5d3b6e5
SHA256
41d26966b3166121e764c785cd1febbb97b5a54bb5e3a635cb3ffc23e80485d4
SHA512
0cb42e208d1f0cf78cbc19776b3bdf04c5d771400eeb7298c9ab62d3658e6a24dac76607a2c6c7817bdc9345640bcec38491c681f1a4ce64b9b38084b5d6cda8
SSDEEP
3072:OmTzbNONkEQLTNh0dx90JoOICwQPChFYLk9YaKViOCk+xAg0Fuj0Udfagn:NANRiBedx6o+PCELk9YsAO1Cgn
Checks for missing Authenticode signature.
resource |
---|
41d26966b3166121e764c785cd1febbb97b5a54bb5e3a635cb3ffc23e80485d4 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualAlloc
GetModuleHandleW
GetProcAddress
GetModuleFileNameA
LoadLibraryW
FreeLibrary
CreateProcessA
GetThreadContext
ReadProcessMemory
VirtualQueryEx
VirtualProtectEx
WriteProcessMemory
SetThreadContext
ResumeThread
CloseHandle
TerminateProcess
VirtualFree
CreateFileW
SetFilePointer
GetFileSize
ReadFile
CreateThread
SetEndOfFile
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
GetStdHandle
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapAlloc
ReadConsoleW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
WriteConsoleW
InitDgBaseModle
QM_BLOCKDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ