DLLGenHWID
GenHWID
GetDllVersionA
Static task
static1
Behavioral task
behavioral1
Sample
10f8b25a019f74ad9dce539b86b99c11eed0668592daf453281be26dd08ab6ba.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
10f8b25a019f74ad9dce539b86b99c11eed0668592daf453281be26dd08ab6ba.dll
Resource
win10v2004-20230703-en
Target
10f8b25a019f74ad9dce539b86b99c11eed0668592daf453281be26dd08ab6ba
Size
120KB
MD5
12380cc14e8b95c2a843c3034fc1590a
SHA1
682fd3f059661a818a1e076f5619664905e1f80e
SHA256
10f8b25a019f74ad9dce539b86b99c11eed0668592daf453281be26dd08ab6ba
SHA512
91bdee67c5ae367a18e77363646a5cd5310f018a6d8ddfa0891a82cfb56e44d7049c1810470637299d4701f76a54993fbb00034de74ec6846ff78ba8955c476c
SSDEEP
768:+zhBOkJpbLGcHSskbOPflz6cpnxPh2Jkj:8zpJpbqcyePfl+cpckj
Checks for missing Authenticode signature.
resource |
---|
10f8b25a019f74ad9dce539b86b99c11eed0668592daf453281be26dd08ab6ba |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
TerminateProcess
CloseHandle
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualProtectEx
GetModuleHandleA
VirtualFree
ReadFile
GetFileSize
SetFilePointer
CreateFileA
ExitProcess
WinExec
CopyFileA
lstrcpyA
WriteFile
DeleteFileA
lstrcmpiA
CreateDirectoryA
lstrlenA
GetModuleFileNameA
wsprintfA
MessageBoxA
srand
_onexit
__dllonexit
_chkesp
memmove
memset
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
rand
calloc
time
free
_initterm
malloc
_adjust_fdiv
DLLGenHWID
GenHWID
GetDllVersionA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ