DAT1
DAT2
DAT3
DAT4
Static task
static1
Behavioral task
behavioral1
Sample
ee44dff2c25771346d8bb5bc88e480e76cc0529bc24cfd9f42ffc5e61ca8cf9f.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ee44dff2c25771346d8bb5bc88e480e76cc0529bc24cfd9f42ffc5e61ca8cf9f.dll
Resource
win10v2004-20230220-en
Target
ee44dff2c25771346d8bb5bc88e480e76cc0529bc24cfd9f42ffc5e61ca8cf9f
Size
568KB
MD5
906d44c6c8e6c462ef3dbfc7589ab28d
SHA1
0a25675ea0d24d6f649a7eff9ec3fa7e67aa4008
SHA256
ee44dff2c25771346d8bb5bc88e480e76cc0529bc24cfd9f42ffc5e61ca8cf9f
SHA512
1b8f290bdf9ec59287622b9bf00535b2e1f3df66d67acd5c4880596c7753552d0065b121dc01f9a05791bb7764da77addd9f57f730ed9851da8c930e5725f576
SSDEEP
12288:Qk4J68Y8yWPeKsWBH89CNVboLnb951e5T9LjbD79lL91ZLgaAQR6qEkXNeBMYN/+:QkvWvBH89CNVboLnb950TLjbD79lLpfT
Checks for missing Authenticode signature.
resource |
---|
ee44dff2c25771346d8bb5bc88e480e76cc0529bc24cfd9f42ffc5e61ca8cf9f |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetLastError
ReleaseSemaphore
GetCurrentProcess
GetCurrentProcessId
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
QueueUserWorkItem
FreeLibrary
GetProcAddress
LoadLibraryW
VerifyVersionInfoW
CreateSemaphoreW
CreateDirectoryW
TryEnterCriticalSection
WaitForSingleObject
Sleep
CreateThread
GetCurrentThreadId
SetThreadPriority
GetLastError
ResumeThread
OpenProcess
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetPrivateProfileSectionW
MultiByteToWideChar
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetEndOfFile
HeapSize
CloseHandle
QueryDosDeviceW
GetLogicalDrives
GetFileSizeEx
GetFileAttributesExW
CreateFileW
VerSetConditionMask
GetSystemTimeAsFileTime
DeleteCriticalSection
LeaveCriticalSection
WriteConsoleW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
EnterCriticalSection
SuspendThread
InitializeCriticalSection
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
HeapReAlloc
QueryPerformanceCounter
QueryPerformanceFrequency
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
ReadConsoleW
SetFilePointerEx
DeleteFileW
MoveFileExW
GetACP
GetTimeZoneInformation
MessageBoxW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SHGetSpecialFolderPathW
FilterSendMessage
FilterConnectCommunicationPort
PathFindExtensionW
NtSuspendProcess
RtlNtStatusToDosError
NtQueryInformationProcess
NtQuerySystemInformation
DAT1
DAT2
DAT3
DAT4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ