??0CRTGFDGFH@@QAE@XZ
??4CRTGFDGFH@@QAEAAV0@ABV0@@Z
?fnRTGFDGFH@@YAHXZ
?nRTGFDGFH@@3HA
RTGFDGFHA
RTGFDGFHB
Static task
static1
Behavioral task
behavioral1
Sample
AF.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
AF.dll
Resource
win10v2004-20231127-en
Target
AF.dll
Size
68KB
MD5
31eeb1787fd5e29f5a9190d2440c188b
SHA1
c891ad07f6d1160b3a295605c0fea971b871d049
SHA256
6f7299e6d4e31b5504b198749090f6952f3424e905bc5d3995d72d2ef19a10d5
SHA512
ff0b20551237d357a0b5105c674c24f5d1cfaef5d81c913c944ec1769d642917a3da267dc0ea47e65a9dc077234cca9b144c76f1b3077db117ffea77798031b9
SSDEEP
768:hiOjLbthI4m+m5eTEScSWOfPZd9CcvOCugzGBDtoQWi4tkPl:dLM425eTEDSW8XvOy8D69tkPl
Checks for missing Authenticode signature.
resource |
---|
AF.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
FreeLibrary
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
CloseHandle
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
WriteFile
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
??0CRTGFDGFH@@QAE@XZ
??4CRTGFDGFH@@QAEAAV0@ABV0@@Z
?fnRTGFDGFH@@YAHXZ
?nRTGFDGFH@@3HA
RTGFDGFHA
RTGFDGFHB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ