DLLGenHWID
GenHWID
GetDllVersionA
Static task
static1
Behavioral task
behavioral1
Sample
71328d3aefeedcbc0e1e5f5f7492de2a780de7387000aa27605b3c6d59e45d46.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
71328d3aefeedcbc0e1e5f5f7492de2a780de7387000aa27605b3c6d59e45d46.dll
Resource
win10v2004-20230831-en
Target
71328d3aefeedcbc0e1e5f5f7492de2a780de7387000aa27605b3c6d59e45d46
Size
120KB
MD5
3d1d32c6f59e09045d2752d7f323d63c
SHA1
c19e3589b8ffd4a9587bf80bba92284afe0488db
SHA256
71328d3aefeedcbc0e1e5f5f7492de2a780de7387000aa27605b3c6d59e45d46
SHA512
210ad4f074f8fa2bad24a02cb7eceb7ee57e42c5215c520f9ba8fb9f8a280535b18c72c718ac4aecf40ed243bf19ec2b6208e5211338073ab00336e7cb32bed3
SSDEEP
768:fzhBOkJpbLGcHSskbOPflz6ckjxPh2Jkk:7zpJpbqcyePfl+ckIkk
Checks for missing Authenticode signature.
resource |
---|
71328d3aefeedcbc0e1e5f5f7492de2a780de7387000aa27605b3c6d59e45d46 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
TerminateProcess
CloseHandle
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualProtectEx
GetModuleHandleA
VirtualFree
ReadFile
GetFileSize
SetFilePointer
CreateFileA
ExitProcess
WinExec
CopyFileA
lstrcpyA
WriteFile
DeleteFileA
lstrcmpiA
CreateDirectoryA
lstrlenA
GetModuleFileNameA
wsprintfA
MessageBoxA
srand
_onexit
__dllonexit
_chkesp
memmove
memset
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
rand
calloc
time
free
_initterm
malloc
_adjust_fdiv
DLLGenHWID
GenHWID
GetDllVersionA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ