?EditSecurity@@YAKPEAX@Z
CreateSecurityPage
Static task
static1
Behavioral task
behavioral1
Sample
ACLUID.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ACLUID.dll
Resource
win10v2004-20231023-en
Target
ACLUID.dll
Size
92KB
MD5
94369c54b6f4eae87c675db25500b1e0
SHA1
eb0ca1dfc481699d0a94657b9c9444b550901e8f
SHA256
eeb50bf5515795046e81e6f4080eb3888eb50cf73d386118c0789e78cddd5196
SHA512
4d743b29f8f3863785981721e3acfeff7deebc6393e41f5d49345adcf872dcc0d4e84c2c56f1a2a4a686029942769b2a8f6e9cc0f74da2d162ca72b7341feb43
SSDEEP
1536:tfOnkGjgK/8StILrYTxoZuodw5rT92DG0x2+4LrVzAY+EN0MsMn1UE:tfOkGjgK/8gILrYTxo4xTNKmrKpEN0jR
Checks for missing Authenticode signature.
resource |
---|
ACLUID.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetLastError
GetProcAddress
VirtualAllocEx
VirtualProtect
CloseHandle
WriteProcessMemory
ResumeThread
CreateFileW
GetFileSize
VirtualAlloc
ReadFile
VirtualFree
WriteFile
GetModuleFileNameW
SetFileAttributesW
LoadLibraryW
GetVersionExW
GetCurrentThread
Sleep
SetLastError
VirtualQuery
GetCurrentThreadId
FlushInstructionCache
SetThreadContext
GetThreadContext
SuspendThread
VirtualProtectEx
VirtualQueryEx
GetModuleHandleW
WaitForSingleObject
GetCurrentProcess
SetStdHandle
WriteConsoleW
SetFilePointer
FlsSetValue
GetCommandLineA
RtlUnwindEx
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EnterCriticalSection
LeaveCriticalSection
DecodePointer
EncodePointer
FlsGetValue
FlsFree
FlsAlloc
HeapFree
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
RaiseException
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
wsprintfW
SetThreadToken
OpenProcessToken
DuplicateToken
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
?EditSecurity@@YAKPEAX@Z
CreateSecurityPage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ