fvsuuysuxxjjj
mdnydxyhe
zpukgmukzhuykrc
Static task
static1
Behavioral task
behavioral1
Sample
1c464f12767ae12dc0d1e66954c3b50d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c464f12767ae12dc0d1e66954c3b50d.dll
Resource
win10v2004-20231215-en
Target
1c464f12767ae12dc0d1e66954c3b50d
Size
128KB
MD5
1c464f12767ae12dc0d1e66954c3b50d
SHA1
1e229b1aabdc3de0930de9d904900433213e2505
SHA256
9fea3e547a4a27eea7aac7b785e98061e3f0f8e2e3bda3bed6670423e83b8ebe
SHA512
3fbf64625fe7755ef3ed84034cde2831cf3a9d7503a1a10df2337535d0931ab1563689d376827a7da2e0eeb3107b1c5e122f9cfe82fe9f1da94e7a4bfd5adf7b
SSDEEP
1536:tRhaW9yRFmj3/Iruw3It/7avoXMBgITL9xJOCnFtLo+NiI1IAu:tRhaW9UoLWusvocBvT5x1Fi+NJa
Checks for missing Authenticode signature.
resource |
---|
1c464f12767ae12dc0d1e66954c3b50d |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcess
VirtualAlloc
HeapAlloc
TerminateProcess
LoadLibraryA
IsBadReadPtr
lstrcmpiA
GetProcAddress
GetStringTypeW
AssignProcessToJobObject
GetProcessHeap
UpdateResourceA
RedrawWindow
TrackPopupMenuEx
DefDlgProcA
EndPath
GetCurrentPositionEx
GetTextCharsetInfo
StrokePath
fvsuuysuxxjjj
mdnydxyhe
zpukgmukzhuykrc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ