fnsomehelper
inject_in
Static task
static1
Behavioral task
behavioral1
Sample
1acbd8401e6ff43a224b4f9d689405bf0f0d8b48859c1a097c0c59e1e1777ae8.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
1acbd8401e6ff43a224b4f9d689405bf0f0d8b48859c1a097c0c59e1e1777ae8.dll
Resource
win10v2004-20231020-en
Target
1acbd8401e6ff43a224b4f9d689405bf0f0d8b48859c1a097c0c59e1e1777ae8
Size
13.4MB
MD5
365c23d0e9bc12175affa467d26cff3e
SHA1
b3992c67214f426d9243433fdecedc8045392332
SHA256
1acbd8401e6ff43a224b4f9d689405bf0f0d8b48859c1a097c0c59e1e1777ae8
SHA512
afb3634c7b57a142770a45894334a410230d520c0e2e80dedc73849f2578e443b13963a5942ee23477a820fb7d290e516f840fdd4eef2d3639c68678d913a4ed
SSDEEP
196608:u2XtC0CQJdK465YZ0x1k+un5unBcSF68Uy5:u2aIKTpxzF
Checks for missing Authenticode signature.
resource |
---|
1acbd8401e6ff43a224b4f9d689405bf0f0d8b48859c1a097c0c59e1e1777ae8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
lstrcpyW
lstrcatW
OpenProcess
K32GetProcessImageFileNameW
CloseHandle
WideCharToMultiByte
CreateToolhelp32Snapshot
GetLastError
Process32FirstW
Process32NextW
lstrlenW
LoadResource
LockResource
SizeofResource
CreateFileW
WriteFile
MultiByteToWideChar
TerminateProcess
WaitForSingleObject
DeleteFileW
WriteConsoleW
QueryDosDeviceW
lstrcmpiW
FindResourceW
GetLogicalDriveStringsW
HeapSize
SetStdHandle
HeapReAlloc
ReadConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
LocalFree
FormatMessageA
GetLocaleInfoEx
GetStringTypeW
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
GetProcAddress
GetFileInformationByHandleEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SHGetFolderPathW
PathRemoveFileSpecW
PathFileExistsW
fnsomehelper
inject_in
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ