Create
Delete
GetExtensionInfo
Static task
static1
Behavioral task
behavioral1
Sample
891873390f21a5d700bff03aaa996d9d2870fedece160a0e9c193399847a5938.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
891873390f21a5d700bff03aaa996d9d2870fedece160a0e9c193399847a5938.dll
Resource
win10v2004-20230824-en
Target
891873390f21a5d700bff03aaa996d9d2870fedece160a0e9c193399847a5938
Size
222KB
MD5
823f6c082d598f6bb7cfd5b21d743360
SHA1
53cb0ea68b88633a08262b9378cd6e3439bb0c22
SHA256
891873390f21a5d700bff03aaa996d9d2870fedece160a0e9c193399847a5938
SHA512
b3af3c7d808c6872ca1e514c94d3922a023e527815fbb0e90c28dd66d3931d4294d88197e1cbd8c109dbf521affe5f0b576ccf1a63d37548d7325b90044270f9
SSDEEP
6144:WR0VUes3EujdVoPN4asum9KYOe9ud7Ok2Ce:1gqPN3Csq9C
Checks for missing Authenticode signature.
resource |
---|
891873390f21a5d700bff03aaa996d9d2870fedece160a0e9c193399847a5938 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryExW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
DecodePointer
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
WideCharToMultiByte
GetCurrentProcess
GetFileAttributesW
CreateDirectoryW
DeleteFileW
GetLocalTime
lstrlenW
CopyFileW
FlushInstructionCache
SetLastError
LockResource
FindResourceExW
CloseHandle
CreateFileW
WriteFile
FindClose
FindFirstFileExW
FindNextFileW
FindResourceW
WriteConsoleW
SetStdHandle
LCMapStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStartupInfoW
TlsFree
FreeLibrary
LoadResource
SizeofResource
MultiByteToWideChar
GetLastError
EnterCriticalSection
RaiseException
LeaveCriticalSection
lstrcmpiW
GetModuleHandleW
GetProcAddress
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStdHandle
GetModuleHandleExW
IsDebuggerPresent
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
EncodePointer
GetCommandLineA
RtlUnwind
ExitProcess
FlushFileBuffers
IsDialogMessageW
DestroyWindow
CharNextW
MessageBoxW
EndDialog
SetWindowLongW
DialogBoxParamW
UnregisterClassW
GetActiveWindow
DestroyIcon
LoadIconW
DestroyMenu
TrackPopupMenu
AppendMenuW
SetWindowPos
CreatePopupMenu
ScreenToClient
GetWindowTextLengthW
GetWindowTextW
SetFocus
EnableWindow
SetWindowTextW
GetDlgItem
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
GetSaveFileNameW
GetOpenFileNameW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
SHFileOperationW
ShellExecuteW
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
VarUI4FromStr
Create
Delete
GetExtensionInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ