SHGetFolderPathA
SHGetFolderPathW
Static task
static1
Behavioral task
behavioral1
Sample
38511fe0970d3fa7c9c9bc08ce84ab343a374a9fc8c4d7afcd0019e4c4485409.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
38511fe0970d3fa7c9c9bc08ce84ab343a374a9fc8c4d7afcd0019e4c4485409.dll
Resource
win10v2004-20230915-en
Target
38511fe0970d3fa7c9c9bc08ce84ab343a374a9fc8c4d7afcd0019e4c4485409
Size
3.1MB
MD5
12bea4c2227ffd5a49f9ce9a208baa78
SHA1
1f8f0123a137fe8bdade020cbe18cc72b02a78bd
SHA256
38511fe0970d3fa7c9c9bc08ce84ab343a374a9fc8c4d7afcd0019e4c4485409
SHA512
928c9a777c1d1c89a13d45453b2e5d4796ea44911c56fd0a52c2fd642872790ad966e198a9a66ece4ce06beef270221c4ce0028e82d28230a56520da253c8ceb
SSDEEP
49152:/fCfNfmuXUFF+nRBXpRf3rsX/tsgN2gj3VI96nQM3A1Gk/aoE4LP4KF07qiBx54S:CfZmCY+3f3rI203aeEaoEQIqiW
Checks for missing Authenticode signature.
resource |
---|
38511fe0970d3fa7c9c9bc08ce84ab343a374a9fc8c4d7afcd0019e4c4485409 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
MessageBoxW
GetProcessWindowStation
GetUserObjectInformationW
SHGetFolderPathA
SHGetFolderPathW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ