DLLGenHWID
GenHWID
GetDllVersionA
Static task
static1
Behavioral task
behavioral1
Sample
7edd7012baec9cbb59df474253c1e420840c08b0897c65f122e9522e61f0c718.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7edd7012baec9cbb59df474253c1e420840c08b0897c65f122e9522e61f0c718.dll
Resource
win10v2004-20230703-en
Target
7edd7012baec9cbb59df474253c1e420840c08b0897c65f122e9522e61f0c718
Size
120KB
MD5
bfe6d422faae2a48206f88b91df83dcd
SHA1
9e2ca96b678578b90230878442e396dd77fd71ab
SHA256
7edd7012baec9cbb59df474253c1e420840c08b0897c65f122e9522e61f0c718
SHA512
6d19e6794b04f759615f59de69adb9b5d20d601b71617d6cd37e92cbfc4d7979754d002b567aca07ac493729abdf6f1aae1f9f73766175ff2ffef0aa4d5bcb35
SSDEEP
384:nC5GJzMk+yNTflK41ZpKToE7cR7cTrSdGkbuMFRfNrtmVhc4O+fztUmTXx209klM:VzMiZ4EZpArGc/SskbuwfNr6cqxPh2J2
Checks for missing Authenticode signature.
resource |
---|
7edd7012baec9cbb59df474253c1e420840c08b0897c65f122e9522e61f0c718 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
TerminateProcess
CloseHandle
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualProtectEx
GetModuleHandleA
VirtualFree
ReadFile
GetFileSize
SetFilePointer
CreateFileA
ExitProcess
WinExec
CopyFileA
lstrcpyA
WriteFile
DeleteFileA
lstrcmpiA
CreateDirectoryA
lstrlenA
GetModuleFileNameA
wsprintfA
MessageBoxA
srand
_onexit
__dllonexit
_chkesp
memmove
memset
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
rand
calloc
time
free
_initterm
malloc
_adjust_fdiv
DLLGenHWID
GenHWID
GetDllVersionA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ