DoWorks
GetHandleVerifier
Static task
static1
Behavioral task
behavioral1
Sample
dca9964647cf3a7a0a8a0e9e12741bed0727e9217014e058e21baecf8753c60f.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dca9964647cf3a7a0a8a0e9e12741bed0727e9217014e058e21baecf8753c60f.dll
Resource
win10v2004-20230221-en
Target
dca9964647cf3a7a0a8a0e9e12741bed0727e9217014e058e21baecf8753c60f
Size
635KB
MD5
4172bd1921f086e0abe329eb54e228ec
SHA1
aa7602f2cb315829da3bcfe94f99c9ca52d38e4b
SHA256
dca9964647cf3a7a0a8a0e9e12741bed0727e9217014e058e21baecf8753c60f
SHA512
87e3ef1895a72a46c323c4ce461487109e2f5b97c851d8da44444700e12ebb6fa8b0ac2504c35a68fe03c69e080d24a6c58fce69b5aec9ce795d68499b227468
SSDEEP
12288:zlkFZr5qrVyswHieI4G5voF7Tloog5wOb48AwT1XuwgydpMNAdmmt+qRX/6cfq6O:zur5qrIZieI4KoFKog5XNtdQRK16
Checks for missing Authenticode signature.
resource |
---|
dca9964647cf3a7a0a8a0e9e12741bed0727e9217014e058e21baecf8753c60f |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetProcAddress
LoadLibraryExW
WriteFile
CreateFileW
Sleep
CloseHandle
LoadLibraryW
SizeofResource
LockResource
LoadResource
FindResourceW
CreateDirectoryW
GetCurrentProcess
GetTempPathW
GetCurrentDirectoryW
GetModuleFileNameW
GetCurrentProcessId
GetTickCount
DuplicateHandle
SetFilePointerEx
FlushFileBuffers
SetThreadPriority
GetCurrentThread
GetThreadPriority
GetModuleHandleW
QueryPerformanceCounter
FindClose
GetCurrentThreadId
IsDebuggerPresent
RaiseException
CreateThread
GetCommandLineW
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetVersionExW
GetModuleHandleExW
GetModuleHandleA
CreateEventW
RegisterWaitForSingleObject
UnregisterWaitEx
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
SetEvent
FindNextFileA
FindFirstFileExA
GetProcessHeap
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetStdHandle
GetModuleFileNameA
HeapReAlloc
ExitThread
HeapSize
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
ExitProcess
GetConsoleMode
GetConsoleCP
GetFileType
SetStdHandle
WaitForSingleObjectEx
WideCharToMultiByte
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
RtlUnwind
SystemFunction036
DoWorks
GetHandleVerifier
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ