DisableHook
EnableHook
Static task
static1
Behavioral task
behavioral1
Sample
6655ac2a9a5fca4bdbd88ae1828a52786d6a6c43d8af9cc85fc8ae995e4f0d74.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6655ac2a9a5fca4bdbd88ae1828a52786d6a6c43d8af9cc85fc8ae995e4f0d74.dll
Resource
win10v2004-20231215-en
Target
6655ac2a9a5fca4bdbd88ae1828a52786d6a6c43d8af9cc85fc8ae995e4f0d74
Size
917KB
MD5
19b0022f24b3df12f87a06cd821437eb
SHA1
2c6174615e6736dc856555b421c603d087169157
SHA256
6655ac2a9a5fca4bdbd88ae1828a52786d6a6c43d8af9cc85fc8ae995e4f0d74
SHA512
42a7546e35655d7afb30c28bdf136a2c27d459474bfd9398b4771dd00c194a6fe3ae41ddd85ebfa3ce38f357e19ca9aa42f8fbd5b42f2ddedce7eaeeac90dc5f
SSDEEP
12288:fkfWkISfQV60QkzT1L9/L+aebnNfgu5OQ9JbIKDOC1giK:MfBtfQZT1L9/L+aebnNZPTb
Checks for missing Authenticode signature.
resource |
---|
6655ac2a9a5fca4bdbd88ae1828a52786d6a6c43d8af9cc85fc8ae995e4f0d74 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemInfo
GlobalMemoryStatusEx
UnmapViewOfFile
MapViewOfFile
CloseHandle
CreateFileMappingA
GetLastError
CreateFileA
FindClose
FindFirstFileA
FlushViewOfFile
WriteFile
CreateFileW
VirtualAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQueryEx
ReadProcessMemory
CreateProcessA
TerminateProcess
ResumeThread
GetModuleHandleA
ReadFile
GetFileSize
SetFilePointer
ExitProcess
GetModuleFileNameA
SetFileAttributesA
CompareStringW
CompareStringA
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapValidate
IsBadReadPtr
GetModuleFileNameW
IsDebuggerPresent
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapSize
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
LoadLibraryW
GetProcessHeap
VirtualQuery
InterlockedExchange
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
FlushFileBuffers
SetEnvironmentVariableA
wsprintfA
DisableHook
EnableHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ