Control
FreeBuffer
Release
Start
Static task
static1
Behavioral task
behavioral1
Sample
1df49f55697a6d00b16ea7f14ffd5de1.dll
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
1df49f55697a6d00b16ea7f14ffd5de1.dll
Resource
win10v2004-20231201-en
Target
1df49f55697a6d00b16ea7f14ffd5de1
Size
628KB
MD5
1df49f55697a6d00b16ea7f14ffd5de1
SHA1
0ffadfc3c8e8565479eb8669568c9c233866b06b
SHA256
aaddcc80ec02568aa30e9adb77aafa70c5be472395cc3a246cc8f8aa9b1b3cc6
SHA512
0c856e8a12caf2f24bd33471a7e8117ec579fe09b68351e09fbb37715707458b96e0fd996741d404304d3dd3248245b8265763a0f236285a61f4fb311b7a8414
SSDEEP
12288:H618qsiEQu4W4MVfPbVC9btPAmHTM8UClZludJ/SjS/halt4raok5VxhgR2E:Hw8LiEQFWNfPpobtPpH4XCly/MwEliL/
Checks for missing Authenticode signature.
resource |
---|
1df49f55697a6d00b16ea7f14ffd5de1 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
GetLastError
HeapFree
HeapSize
HeapReAlloc
HeapAlloc
GetProcessHeap
lstrlenA
lstrcpyA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateThread
DeleteCriticalSection
lstrlenW
LocalFree
lstrcpynA
lstrcmpA
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
SetLastError
SetFilePointerEx
MultiByteToWideChar
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
CloseHandle
GetSystemInfo
LoadLibraryW
HeapCompact
HeapDestroy
UnlockFile
LockFileEx
GetFileSize
GetCurrentProcessId
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
VirtualQuery
GetConsoleMode
GetConsoleCP
SetStdHandle
GetStringTypeW
GetProcAddress
LoadLibraryA
AddVectoredExceptionHandler
Sleep
UnmapViewOfFile
GetModuleHandleA
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
DecodePointer
WriteConsoleW
HeapValidate
FlushFileBuffers
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlUnwind
RaiseException
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetACP
GetStdHandle
GetFileType
CompareStringW
LCMapStringW
GetTimeZoneInformation
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
SysAllocStringLen
SysFreeString
Control
FreeBuffer
Release
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ