GetCapacities
ScanWOUI
ScanWUI
SelectScanner
Static task
static1
Behavioral task
behavioral1
Sample
e177f5238e9078c30d9c2778105086704147be59cbf32369f847d14db82c02e2.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e177f5238e9078c30d9c2778105086704147be59cbf32369f847d14db82c02e2.dll
Resource
win10v2004-20230220-en
Target
e177f5238e9078c30d9c2778105086704147be59cbf32369f847d14db82c02e2
Size
76KB
MD5
ab17c7d367bb41ddb4bc8009b5d68e16
SHA1
12cf38a3224121ae23c9f2ddaf3d5cf40e2ee1f1
SHA256
e177f5238e9078c30d9c2778105086704147be59cbf32369f847d14db82c02e2
SHA512
1db88a5bb5d9a64cb7861173e562a4a44a57e678c702e8e4586c5f33192518a7fd44ad310fbe5a3ae915d8dd39d5f21d424de114fb586b0387003680de1f069d
SSDEEP
1536:ot5O+LRqTmDoLjX5V6oFkM3uBHtbctXdqlNjX+ju:gTaV6oP3uQtXdqDjXwu
Checks for missing Authenticode signature.
resource |
---|
e177f5238e9078c30d9c2778105086704147be59cbf32369f847d14db82c02e2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateMutexA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
ReadFile
RtlUnwind
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
ord1
GetCapacities
ScanWOUI
ScanWUI
SelectScanner
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ