DLLGenHWID
GenHWID
GetDllVersionA
Static task
static1
Behavioral task
behavioral1
Sample
ff65646e2b35e9a4f6e066fb26ec8870bc76ef4d15a70abc1d6e3207423b11a8.dll
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
ff65646e2b35e9a4f6e066fb26ec8870bc76ef4d15a70abc1d6e3207423b11a8.dll
Resource
win10v2004-20230703-en
Target
ff65646e2b35e9a4f6e066fb26ec8870bc76ef4d15a70abc1d6e3207423b11a8
Size
120KB
MD5
c55f65d22e7b131c2f10b7bb6b757a4c
SHA1
f9b956f813bc868689380253ca4ba32ac5a614fe
SHA256
ff65646e2b35e9a4f6e066fb26ec8870bc76ef4d15a70abc1d6e3207423b11a8
SHA512
2d7b5098de19df6cf92f3fb7bb8f34d274ab99ed42b050ba175b67c42e82f75ab73205ed34f7af89cc0b222eecc256e1f82160b1ec195c0fd0a5a3bf843c917d
SSDEEP
768:WzhBOkJpbLGcHSskbOPflz6cBUxPh2Jkz:EzpJpbqcyePfl+cBPkz
Checks for missing Authenticode signature.
resource |
---|
ff65646e2b35e9a4f6e066fb26ec8870bc76ef4d15a70abc1d6e3207423b11a8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
TerminateProcess
CloseHandle
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualProtectEx
GetModuleHandleA
VirtualFree
ReadFile
GetFileSize
SetFilePointer
CreateFileA
ExitProcess
WinExec
CopyFileA
lstrcpyA
WriteFile
DeleteFileA
lstrcmpiA
CreateDirectoryA
lstrlenA
GetModuleFileNameA
wsprintfA
MessageBoxA
srand
_onexit
__dllonexit
_chkesp
memmove
memset
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
rand
calloc
time
free
_initterm
malloc
_adjust_fdiv
DLLGenHWID
GenHWID
GetDllVersionA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ