DllMain
StartW
Static task
static1
Behavioral task
behavioral1
Sample
8b6eb18e2b8b50f03163586f83de6fcd.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b6eb18e2b8b50f03163586f83de6fcd.dll
Resource
win10v2004-20231215-en
Target
8b6eb18e2b8b50f03163586f83de6fcd
Size
361KB
MD5
8b6eb18e2b8b50f03163586f83de6fcd
SHA1
321dec1452e1ae0ecbf02028bde785338b07f800
SHA256
1ee4dbd1da27ff32a0d6870255edf998872b088dee6ea8ae074f5fb1def53cca
SHA512
4a11a66c1418a40be84f74bf9b990254a49cfef9d1c3214633debdfc25ed207fb73640326caed7eb0772a1ff86ee3890f254c0b65fc9c9bd8c25cb8666c7c563
SSDEEP
6144:7afAqT1sVdWF0hDHkRqvRNvlMD7N7lGK3D6eN5InGIeUHrOw:73PWFuA++DhlGK3D625T
Checks for missing Authenticode signature.
Processes:
resource |
---|
8b6eb18e2b8b50f03163586f83de6fcd |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
CreateFileMappingW
CreateFileW
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetLastError
GetModuleHandleW
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryW
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
RaiseException
ReleaseSemaphore
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
_wcsnicmp
abort
calloc
exit
fputc
fputs
free
fwrite
localeconv
malloc
mbstowcs_s
memcmp
memcpy
memset
realloc
strchr
strcmp
strerror
strlen
strncmp
vfprintf
wcslen
_write
DllMain
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ