f0r_construct
f0r_deinit
f0r_destruct
f0r_get_param_info
f0r_get_param_value
f0r_get_plugin_info
f0r_init
f0r_set_param_value
f0r_update
Static task
static1
Behavioral task
behavioral1
Sample
easy_Benign_ffd2e6639746c57ac2baa6f3c2600765213d35b4d01aa8ecc2cdbf4f2fa005f3.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
easy_Benign_ffd2e6639746c57ac2baa6f3c2600765213d35b4d01aa8ecc2cdbf4f2fa005f3.dll
Resource
win10v2004-20230703-en
Target
easy_Benign_ffd2e6639746c57ac2baa6f3c2600765213d35b4d01aa8ecc2cdbf4f2fa005f3.dll
Size
18KB
MD5
0e057c748b428b3717355d232c0bdeb8
SHA1
6c997bab2122caba8a75645f0831363ccfc96834
SHA256
ffd2e6639746c57ac2baa6f3c2600765213d35b4d01aa8ecc2cdbf4f2fa005f3
SHA512
2120320a34d9ec0c7ad1ebe4b57d4bd1868a7d5142d68e9ba0f53988a4c3aa8866496ecb3b64c8321614fe03c54680bae24ab17c0d147ecf05debe65c7db21c2
SSDEEP
192:0M1KTcXqwB0Z3Puhk+gSDFNrED/bbgEcNH+3TPta0wv22YL7CbNBdD/APiEV:xgTWlK/XiLID/IhH+DPeO2YL7wD+T
Checks for missing Authenticode signature.
resource |
---|
easy_Benign_ffd2e6639746c57ac2baa6f3c2600765213d35b4d01aa8ecc2cdbf4f2fa005f3.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcpy
realloc
signal
strlen
strncmp
vfprintf
f0r_construct
f0r_deinit
f0r_destruct
f0r_get_param_info
f0r_get_param_value
f0r_get_plugin_info
f0r_init
f0r_set_param_value
f0r_update
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ