EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
0673bf9264fc2c5ccd2901ee6b4c87fc.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0673bf9264fc2c5ccd2901ee6b4c87fc.dll
Resource
win10v2004-20231215-en
Target
0673bf9264fc2c5ccd2901ee6b4c87fc
Size
20KB
MD5
0673bf9264fc2c5ccd2901ee6b4c87fc
SHA1
5884b476161df6e418d2917b94e2b137a34d57ab
SHA256
50aed2754be243f6281893ce643947307169104aa6defb36eb93664d9cd75fe6
SHA512
ab80b1746914e997df3bdebbad1a429b0dbe6eff10059f2e51fa146ba0dad88b75840d7b0f726fe570cb192ada63c679919e526ddbe35e382fa814e176f662ae
SSDEEP
384:Y5LO/9rD1Em7ib18Hvsr76w/FA3WkA5XJYGbo7Ina0nSQSlsv04cMhPc:Y5Lm818HEr//P5XJFFa0nL0
Checks for missing Authenticode signature.
resource |
---|
0673bf9264fc2c5ccd2901ee6b4c87fc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
GetThreadDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE