Compress
CreateCompression
CreateDecompression
DeInitCompression
DeInitDecompression
Decompress
DestroyCompression
DestroyDecompression
InitCompression
InitDecompression
ResetCompression
ResetDecompression
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Win32.Sasfis.29679.86.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Win32.Sasfis.29679.86.dll
Resource
win10v2004-20230915-en
Target
SecuriteInfo.com.Trojan.Win32.Sasfis.29679.86.dll
Size
2.2MB
MD5
22f272522cd3f367f332985987eb7488
SHA1
d8dd99b63e06525e2a14da46dc8ac12600410066
SHA256
51f8d9f00d44e561dced4a75baa285f0dafed6f176dc0d446731e18597b7eb53
SHA512
777c0686d93f2004b5badca6c0d3e983ad620912eb8e51a86df096e8534fd80de3e21d1db10515172d4db6dd0c796249826e7196a097138a4ac0a9645e6e5613
SSDEEP
49152:cAdf809jidYC2tHqPDVbm+s8KuqGaX0ToIBAUZLYkHgAfOyG:cAdf809jidYC2tHqPDXJBAUZL6AO
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.Trojan.Win32.Sasfis.29679.86.dll |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalFree
LocalAlloc
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Compress
CreateCompression
CreateDecompression
DeInitCompression
DeInitDecompression
Decompress
DestroyCompression
DestroyDecompression
InitCompression
InitDecompression
ResetCompression
ResetDecompression
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ