ExportFunc1
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
Static task
static1
Behavioral task
behavioral1
Sample
11650b1be392299b8214b1321306cf788b31496fab7f9c58322c2dba9d3350c7.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
11650b1be392299b8214b1321306cf788b31496fab7f9c58322c2dba9d3350c7.dll
Resource
win10v2004-20230220-en
Target
11650b1be392299b8214b1321306cf788b31496fab7f9c58322c2dba9d3350c7
Size
1.5MB
MD5
9daca243a1b2be211d7fac69c3e01fbd
SHA1
472296c3829c4ba5c31044dc758dabee09dda920
SHA256
11650b1be392299b8214b1321306cf788b31496fab7f9c58322c2dba9d3350c7
SHA512
56536aae767a3b1e3ba780391fb3f29aaf9b6a20facf62583731b9ce634cbad271995167fe90d4154c80151682dfe44b586fd6d685e32a9e77068cf3aa048e58
SSDEEP
49152:t9lCNky2euKEP8wCACLWWPp7q40DYVAPaTQ5:XFeuKAQACLWWx7KYa
Checks for missing Authenticode signature.
resource |
---|
11650b1be392299b8214b1321306cf788b31496fab7f9c58322c2dba9d3350c7 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PathFindFileNameW
PathRemoveFileSpecW
StrStrIW
CreateThread
GetFileSize
WriteFile
ReadFile
CloseHandle
DeleteFileW
SetFilePointer
GetModuleFileNameW
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
CopyFileW
Sleep
TerminateThread
WaitForSingleObject
GetLastError
DisableThreadLibraryCalls
IsBadReadPtr
CreateFileW
GetEnvironmentVariableW
GetProcAddress
ExpandEnvironmentStringsW
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetDriveTypeW
SearchPathW
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetShortPathNameW
CreateMutexW
OpenMutexW
ReleaseMutex
FreeLibrary
LoadLibraryExW
GetModuleHandleW
LoadLibraryW
GetCurrentProcess
OpenProcess
QueryDosDeviceW
FormatMessageW
LocalFree
SetEndOfFile
SetFileTime
GetFileTime
HeapAlloc
HeapFree
GetProcessHeap
GlobalAlloc
GetVersionExW
GetComputerNameExW
GlobalFree
FindResourceW
LoadResource
LockResource
GetSystemInfo
lstrcmpiW
FindClose
FindNextFileW
GetFullPathNameW
GetTempFileNameW
MoveFileExW
CreateDirectoryW
GetSystemDirectoryW
GetFileAttributesW
lstrlenW
GetTempPathW
GetCurrentDirectoryW
MoveFileW
SetCurrentDirectoryW
RemoveDirectoryW
GetWindowsDirectoryW
SetFileAttributesW
FileTimeToDosDateTime
DosDateTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
LocalFileTimeToFileTime
GetTickCount
InterlockedExchange
InterlockedExchangeAdd
SetLastError
GetLogicalDriveStringsW
GetDiskFreeSpaceW
GetVolumeInformationW
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
LoadLibraryA
DeviceIoControl
lstrcatW
lstrcpyW
GetFileSizeEx
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
EncodePointer
GetStringTypeW
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
FatalAppExitA
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetCurrentThread
GetStdHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetTimeZoneInformation
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapReAlloc
SetConsoleCtrlHandler
ReadConsoleW
SetStdHandle
WriteConsoleW
OutputDebugStringW
SetEnvironmentVariableA
VirtualFree
VirtualAlloc
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CryptMsgClose
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
UnregisterClassW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
ExportFunc1
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ