DLLGenHWID
GenHWID
GetDllVersionA
Static task
static1
Behavioral task
behavioral1
Sample
392a9398572602f49bfb6e198ca7bcb9f8141f5d7d746425f819813ddbaec02a.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
392a9398572602f49bfb6e198ca7bcb9f8141f5d7d746425f819813ddbaec02a.dll
Resource
win10v2004-20230703-en
Target
392a9398572602f49bfb6e198ca7bcb9f8141f5d7d746425f819813ddbaec02a
Size
120KB
MD5
71911ab2caf915779d550cf83d1e9dad
SHA1
ac1d14dd7d150e0872a08968b29040f9c656f360
SHA256
392a9398572602f49bfb6e198ca7bcb9f8141f5d7d746425f819813ddbaec02a
SHA512
3bf1c97b3f2129d53c0fd623f359a271e21d240b4266ae9b4c39f8c801f527cc0c2b490d02c10f6ac9e264fbfcd5f58f30465321c3ece7b6159c429b16be585f
SSDEEP
384:DC5GJzMk+yNTflK41ZpKToE7cR7cTrSdGkbuMFRfNrtmVhc4c+fztUmTXx209klc:hzMiZ4EZpArGc/SskbuwfNr6ccxPh2J6
Checks for missing Authenticode signature.
resource |
---|
392a9398572602f49bfb6e198ca7bcb9f8141f5d7d746425f819813ddbaec02a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
TerminateProcess
CloseHandle
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualProtectEx
GetModuleHandleA
VirtualFree
ReadFile
GetFileSize
SetFilePointer
CreateFileA
ExitProcess
WinExec
CopyFileA
lstrcpyA
WriteFile
DeleteFileA
lstrcmpiA
CreateDirectoryA
lstrlenA
GetModuleFileNameA
wsprintfA
MessageBoxA
srand
_onexit
__dllonexit
_chkesp
memmove
memset
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
rand
calloc
time
free
_initterm
malloc
_adjust_fdiv
DLLGenHWID
GenHWID
GetDllVersionA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ