_GetFeatureMask@0
_GetMaxVersion@0
_GetMemberId@0
_GetSerial@0
_ValidateDLL2@32
_ValidateDLL3@8
_ValidateProgram@32
Static task
static1
Behavioral task
behavioral1
Sample
c3ed504d9da12b4059c80d1b7f05a372a934e51a473e9df9e19e7c87b33c8256.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c3ed504d9da12b4059c80d1b7f05a372a934e51a473e9df9e19e7c87b33c8256.dll
Resource
win10v2004-20230220-en
Target
c3ed504d9da12b4059c80d1b7f05a372a934e51a473e9df9e19e7c87b33c8256
Size
13KB
MD5
33ef7661b4cbfb45c2a7a2937fd49e20
SHA1
d050ca8f140317ffd2a407a5be2c2db1630720ba
SHA256
c3ed504d9da12b4059c80d1b7f05a372a934e51a473e9df9e19e7c87b33c8256
SHA512
25a23308735ae70c9d03423e3c51e5339e370da6b209b826fa4ebf97eca48d45067c45840d9aecf8312664bafc444e4ec298469ba0f240ef8cf56f995e65ca2a
SSDEEP
384:KwWwGWH4Zk5vQHQIfXUHsYEkPDaKVH9q1vH19TyBR:NWbOckJwfXUwL1jTiR
Checks for missing Authenticode signature.
resource |
---|
c3ed504d9da12b4059c80d1b7f05a372a934e51a473e9df9e19e7c87b33c8256 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
_GetFeatureMask@0
_GetMaxVersion@0
_GetMemberId@0
_GetSerial@0
_ValidateDLL2@32
_ValidateDLL3@8
_ValidateProgram@32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE