?GetVersionInstance@@YAPAUHINSTANCE__@@XZ
?VersionGetDDETopicType@@YAKXZ
?VersionGetRes@@YAPBDI@Z
?VersionLoadFileRes@@YA?AVCString@@I@Z
?VersionLoadIcon@@YAPAUHICON__@@I@Z
?VersionLoadImage@@YAPAUHBITMAP__@@I@Z
?VersionLoadString@@YA?AVCString@@I@Z
Static task
static1
Behavioral task
behavioral1
Sample
5dd401caffcd119ad89cd8d6dbb8aee3810cfe16786150e093a6f3cea1d0ff20.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5dd401caffcd119ad89cd8d6dbb8aee3810cfe16786150e093a6f3cea1d0ff20.dll
Resource
win10v2004-20231215-en
Target
5dd401caffcd119ad89cd8d6dbb8aee3810cfe16786150e093a6f3cea1d0ff20
Size
4.6MB
MD5
6cc87c8fbfd5e90b8509b3c5a1c00b0e
SHA1
7704c5f10794fdc197aafc8e05fca0a9604f5b21
SHA256
5dd401caffcd119ad89cd8d6dbb8aee3810cfe16786150e093a6f3cea1d0ff20
SHA512
846e8ceea21dab84260a6a5dfa371951d2d8b55b13a0bff6b324335f2dc842642b2b8ab50ac5e39c53c4cea74acfe7e38e6a35892897d519c3a973ac9154ed3c
SSDEEP
24576:0e01ooum6V6PmcpRGFfskknUgxlRcMAiGgQpgQpgQQyPH0D+OmqnnHIOi/oOBN:Y9uFUPmcpwFfIUgxrcMAigygOHygOB
Checks for missing Authenticode signature.
resource |
---|
5dd401caffcd119ad89cd8d6dbb8aee3810cfe16786150e093a6f3cea1d0ff20 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord1182
ord800
ord860
ord535
ord823
ord540
ord858
ord538
ord342
ord1253
ord2614
ord1168
_adjust_fdiv
_initterm
free
__CxxFrameHandler
malloc
LoadResource
FindResourceA
SizeofResource
LoadIconA
LoadBitmapA
LoadStringA
?GetVersionInstance@@YAPAUHINSTANCE__@@XZ
?VersionGetDDETopicType@@YAKXZ
?VersionGetRes@@YAPBDI@Z
?VersionLoadFileRes@@YA?AVCString@@I@Z
?VersionLoadIcon@@YAPAUHICON__@@I@Z
?VersionLoadImage@@YAPAUHBITMAP__@@I@Z
?VersionLoadString@@YA?AVCString@@I@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ