NSGetModule
NSModule
Static task
static1
Behavioral task
behavioral1
Sample
0a872721c810be56aa0ba5cbd5591789.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a872721c810be56aa0ba5cbd5591789.dll
Resource
win10v2004-20231215-en
Target
0a872721c810be56aa0ba5cbd5591789
Size
1.7MB
MD5
0a872721c810be56aa0ba5cbd5591789
SHA1
e2b478ccbdeb53e1f0c5458044265589d271fb70
SHA256
793690996661627cdc315647635eb345d6dacae792ffda544d306b0c1a40e974
SHA512
66effe67900e619a10c9da0596641438eb09da47569c334da9189df6a69627e933a11cf3614a554a491981a2a1d443eb4d552540366644ec5968af984f2955f2
SSDEEP
49152:Iw/kngP7YFQW7DNw0feKbZwwT+QrjGQ7x7iz:h/mgjLWPNw0fRuQr
Checks for missing Authenticode signature.
resource |
---|
0a872721c810be56aa0ba5cbd5591789 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NS_Alloc
NS_GetServiceManager
NS_GetComponentManager
NS_Free
NS_CStringContainerFinish
NS_CStringSetData
NS_CStringContainerInit
NS_StringContainerFinish
NS_StringContainerInit2
NS_StringContainerInit
NS_CStringGetData
NS_StringGetData
GetModuleHandleW
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
LoadLibraryW
CreateThread
SetThreadPriority
TerminateThread
GetExitCodeThread
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
GetLastError
Sleep
DisableThreadLibraryCalls
LocalFree
LocalAlloc
WaitForSingleObject
ResetEvent
SetEvent
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
SetLastError
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
InterlockedExchange
InterlockedExchangeAdd
InterlockedCompareExchange
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
HeapFree
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
ExitProcess
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
GetFullPathNameW
GetLocaleInfoA
GetStringTypeA
IsValidLocale
IsWindow
IsWindowVisible
SetWindowLongW
wsprintfW
PR_AtomicDecrement
PR_AtomicIncrement
VariantInit
VariantClear
SysAllocString
SysFreeString
NSGetModule
NSModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ