Handler
RCW
Static task
static1
Behavioral task
behavioral1
Sample
a49f76782a2dbece4766384289fe1f01e73aa4ad47f1f3884822d1a396bc43f6.dll
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
a49f76782a2dbece4766384289fe1f01e73aa4ad47f1f3884822d1a396bc43f6.dll
Resource
win10v2004-20231130-en
Target
a49f76782a2dbece4766384289fe1f01e73aa4ad47f1f3884822d1a396bc43f6
Size
11KB
MD5
7696168729093bee9ff9e99a626717e4
SHA1
a4506f467f412841b9c4257a2a1058994d270b11
SHA256
a49f76782a2dbece4766384289fe1f01e73aa4ad47f1f3884822d1a396bc43f6
SHA512
11c4cb898b1e4a2f65590594977d272061f0f5d8ff8348d7d95f590648be9d9d1e382ba073093bdced03ad44c89e8641c20649550fc95ff6ef866c7b2f2a1f23
SSDEEP
96:V+2k/ngJiYofQclDAPx41lXaC4TUJoW1gFsPKEAfzyw8F75K67eydOw7EernsDJV:VnBJiYGlAPx4L77ArNI4GeCOw5rsD
Checks for missing Authenticode signature.
resource |
---|
a49f76782a2dbece4766384289fe1f01e73aa4ad47f1f3884822d1a396bc43f6 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
OpenFile
GetFileSize
HeapAlloc
GetProcessHeap
ReadFile
GetLastError
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
__std_type_info_destroy_list
memset
__C_specific_handler
__stdio_common_vfprintf
__acrt_iob_func
_initialize_onexit_table
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment
_execute_onexit_table
Handler
RCW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ