CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
Static task
static1
Behavioral task
behavioral1
Sample
oggflt.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
oggflt.dll
Resource
win10v2004-20230703-en
Target
oggflt.sft
Size
130KB
MD5
0c8c1ee3ba92189f4ce21d1b396a2765
SHA1
b7daa4a6e16416151dccbb0a89f304961b6cb627
SHA256
9e589f86317d840df9bb74f6ee20c24ca65afe58f4009740382f63a0f5531941
SHA512
0a4339092ac55bac3b1bdfaaa3401020f8f49918bd2fdb14524f3d558eb840b876aedfdeb54a1da163fa36393abf3fe8ab7e112a34ea9d891e82a22e96c85ddc
SSDEEP
1536:Ww+JHBmul5IMIPkmLnFfUs3OF+KQ51PGTUBHnEJj0AtDLPJwdMSIiRaEUsXxTTUI:CCul5jEkSbOF+31PGTUBwoA8uMR0IjD
Checks for missing Authenticode signature.
resource |
---|
oggflt.sft |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord259
ord283
ord738
malloc
realloc
memmove
free
memchr
floor
_ftol
calloc
qsort
exit
frexp
ceil
_CIpow
ldexp
_errno
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
_initterm
_adjust_fdiv
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ