AmsiCloseSession
AmsiInitialize
AmsiOpenSession
AmsiScanBuffer
AmsiScanString
AmsiUacInitialize
AmsiUacScan
AmsiUacUninitialize
AmsiUninitialize
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
easy_Benign_ffcda18673b878fba596f59d151fe4fb324bc59518d7b9daf3682103fe68884e.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
easy_Benign_ffcda18673b878fba596f59d151fe4fb324bc59518d7b9daf3682103fe68884e.dll
Resource
win10v2004-20230703-en
Target
easy_Benign_ffcda18673b878fba596f59d151fe4fb324bc59518d7b9daf3682103fe68884e.dll
Size
21KB
MD5
8a2a095566e02969ba1da8e83f0b000a
SHA1
d34c8e4c925c54cf7c3dd5e18a72233b49878509
SHA256
ffcda18673b878fba596f59d151fe4fb324bc59518d7b9daf3682103fe68884e
SHA512
b7ab00b8b6d854e29d2889dcaf2f619b182bc7915f9a0d4a7e686eab13c76751f28dc0a9b03ecc5f1b941220cc3e3c3e2c75bb372d403a1e293bb35056658b27
SSDEEP
384:kubo0ODxS2Z+BH1A6J+vLhQMIr4dryzIQMs:kubo0ODx5smkU
Checks for missing Authenticode signature.
resource |
---|
easy_Benign_ffcda18673b878fba596f59d151fe4fb324bc59518d7b9daf3682103fe68884e.dll |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
DisableThreadLibraryCalls
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
RaiseException
Sleep
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
_amsg_exit
_initterm
_lock
_unlock
_vsnprintf
__iob_func
_strdup
abort
calloc
fputs
free
fwrite
getenv
signal
strncmp
vfprintf
_snprintf
memcmp
memmove
sprintf
strchr
strcmp
strcpy
strcspn
strlen
AmsiCloseSession
AmsiInitialize
AmsiOpenSession
AmsiScanBuffer
AmsiScanString
AmsiUacInitialize
AmsiUacScan
AmsiUacUninitialize
AmsiUninitialize
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ