IsSupportedWindowsOSVersion
issuiteCheckVCVersion
issuiteCompareProductVersionLC
Static task
static1
Behavioral task
behavioral1
Sample
6b018bc0f6a403b313ec6ced8726bda9be4e4394bf92b6780dd6b57cdaa4d62d.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6b018bc0f6a403b313ec6ced8726bda9be4e4394bf92b6780dd6b57cdaa4d62d.dll
Resource
win10v2004-20230915-en
Target
6b018bc0f6a403b313ec6ced8726bda9be4e4394bf92b6780dd6b57cdaa4d62d
Size
100KB
MD5
051cf9adc1062323f549aa81ca01e884
SHA1
fae9d5b88eeed9de5d02acbe7bfce209d8564752
SHA256
6b018bc0f6a403b313ec6ced8726bda9be4e4394bf92b6780dd6b57cdaa4d62d
SHA512
4316e2be76c63cc62290c3d937e7c786601ddfee62b5e0e1dc4012c1e9e93ad9148fd6e4315431660ee68b1b20ab871644a188fa35d729d1cf726c75b2c865a9
SSDEEP
3072:nTY/SJJR+877oNFvzlj5P33Q4KlC1aTypa:nTY/eX7G9hBgCwTypa
Checks for missing Authenticode signature.
resource |
---|
6b018bc0f6a403b313ec6ced8726bda9be4e4394bf92b6780dd6b57cdaa4d62d |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord248
ord205
MessageBoxW
CoUninitialize
CoInitializeEx
SysAllocString
SysFreeString
SysAllocStringLen
FlushFileBuffers
WriteFile
SetStdHandle
GetStringTypeW
GetFileType
RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
GetModuleHandleW
GetProcAddress
DecodePointer
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
GetConsoleCP
GetProcessHeap
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW
HeapSize
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
SetLastError
RtlUnwind
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetACP
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
RegGetValueW
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
IsSupportedWindowsOSVersion
issuiteCheckVCVersion
issuiteCompareProductVersionLC
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ