DllMain
InitializePrintMonitor
ShowMessage
ShowMessageW
Static task
static1
Behavioral task
behavioral1
Sample
12bd1a593ef114f71749fe0167f795ac9b598a62dd1c19488152d02f32addfac.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
12bd1a593ef114f71749fe0167f795ac9b598a62dd1c19488152d02f32addfac.dll
Resource
win10v2004-20230703-en
Target
12bd1a593ef114f71749fe0167f795ac9b598a62dd1c19488152d02f32addfac
Size
216KB
MD5
e0d7d46305cb4e28ef54dec8a3487349
SHA1
ed2db8c1da102c568d592fd61d36f41ca87c5ff6
SHA256
12bd1a593ef114f71749fe0167f795ac9b598a62dd1c19488152d02f32addfac
SHA512
b82414d8a8a903ff1164ec31eb872d4f49440b7bcf22434932fbe636f2135351812440646fa496a25c77aab6981e61c7dac2e5fb90d4175871be65ddd34bcdca
SSDEEP
3072:sLnN9m5Ml8FSBWkD4SWHt+QSPLrd8QaHjItAXy4c5QjLhUaOooHs:sLLmYjZWHqPLrpC44tjLj4
Checks for missing Authenticode signature.
resource |
---|
12bd1a593ef114f71749fe0167f795ac9b598a62dd1c19488152d02f32addfac |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
EnumProcesses
GetModuleFileNameExW
DestroyEnvironmentBlock
CreateEnvironmentBlock
TerminateProcess
WaitForSingleObject
CreateProcessW
GetCurrentProcessId
GetCurrentThread
SetLastError
DeleteFileW
FreeLibrary
GetProcAddress
DisableThreadLibraryCalls
InitializeCriticalSection
EnterCriticalSection
OpenProcess
CreateFileW
WriteFile
PulseEvent
FlushFileBuffers
CreateEventW
SetEndOfFile
CreateFileA
LoadLibraryA
HeapReAlloc
GetLocaleInfoA
GlobalAlloc
GlobalLock
CloseHandle
GlobalUnlock
GlobalFree
GetModuleFileNameW
FindFirstFileW
FindClose
GetTempPathW
GetLastError
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
LeaveCriticalSection
RtlUnwindEx
GetStringTypeW
WideCharToMultiByte
HeapFree
CreateDirectoryW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
SetEnvironmentVariableA
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetConsoleCP
GetConsoleMode
HeapAlloc
RaiseException
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
GetTimeZoneInformation
MultiByteToWideChar
GetDateFormatA
GetTimeFormatA
Sleep
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
SetStdHandle
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InitializeCriticalSectionAndSpinCount
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
MessageBoxA
MessageBoxW
SetJobW
ClosePrinter
OpenPrinterW
GetJobW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenThreadToken
ImpersonateSelf
RevertToSelf
CreateProcessAsUserW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
DuplicateTokenEx
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegDeleteValueW
DllMain
InitializePrintMonitor
ShowMessage
ShowMessageW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ