AssembleApplication
AssembleModule
Static task
static1
Behavioral task
behavioral1
Sample
0e3f9330cd27c2e3100aa256a7ff5edd5be537cbdaf2952c9491bddc279259ac.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0e3f9330cd27c2e3100aa256a7ff5edd5be537cbdaf2952c9491bddc279259ac.dll
Resource
win10v2004-20230220-en
Target
0e3f9330cd27c2e3100aa256a7ff5edd5be537cbdaf2952c9491bddc279259ac
Size
17KB
MD5
b1e29952eefe5b432e0ddad4ceecd1d0
SHA1
a1f3f9f2315083c3a6ab4863d803700f6315a831
SHA256
0e3f9330cd27c2e3100aa256a7ff5edd5be537cbdaf2952c9491bddc279259ac
SHA512
cd42531394c736177b5fdd815fdc278b08b51ec63b2a6ccf352a5dcc889b0b8acd8df50cf23906480263afca693689d41bd966fc18dba9848df3a2e4a08ca29c
SSDEEP
192:nDqeRwdb3enG2RxnSGzTcb7dYMnW0TYxm2pXEz4JWaULI7kbSHkFQc3psZ/Q99gF:DqzdeGQ/TcFPnW0wp0tekWo5s5eGZvXv
Checks for missing Authenticode signature.
resource |
---|
0e3f9330cd27c2e3100aa256a7ff5edd5be537cbdaf2952c9491bddc279259ac |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegQueryValueExW
GetKeyboardType
AssembleApplication
AssembleModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE