AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Static task
static1
Behavioral task
behavioral1
Sample
msimg32.dll
Resource
win10v2004-20230824-en
Target
msimg32.dll
Size
25KB
MD5
f67dc105bf2304f506370790123c55d2
SHA1
b27d89801065a92a3da8b94a6efb38ce30df95ec
SHA256
aa7ede16191dff7567c725f7a27c7634bef4e2d7a2c48c2e6403b304b35a4a0d
SHA512
2f926f8eb9be457d75ced691a6912efe3ecdd193ab476474cc631cd1b35aa3fe70a2d5150752b2544537227a7a230db4211b1ba0d5454d21c3f9d201b6df4baa
SSDEEP
384:RFP14rfHYb9CfQgC3PoZnfSQyFLK0GLjpDmYwWJh9a89IM1B1eN4PCA9O80OFOh3:RFPcYb9EPCQnqQRjQYRN6N
Checks for missing Authenticode signature.
resource |
---|
msimg32.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
memset
wcsstr
wcscmp
memmove
memcpy
strlen
strcpy
wcsncpy
wcslen
wcscat
malloc
free
HeapCreate
HeapDestroy
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
VirtualProtect
OpenEventW
CreateFileMappingW
MapViewOfFile
WaitForSingleObject
SetEvent
CreateProcessW
CloseHandle
GetSystemDirectoryW
UnregisterWait
EnterCriticalSection
LeaveCriticalSection
HeapFree
TlsFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
TlsGetValue
HeapAlloc
GetCurrentProcess
GetCurrentThread
DuplicateHandle
RegisterWaitForSingleObject
TlsSetValue
CreateThread
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
LoadLibraryW
GetDriveTypeW
FindFirstFileW
FindClose
GetFileAttributesW
HeapReAlloc
CharLowerW
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ