EventLogon
EventStartup
Static task
static1
Behavioral task
behavioral1
Sample
2af37303000f5c2be5767c68f36616d8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2af37303000f5c2be5767c68f36616d8.dll
Resource
win10v2004-20231215-en
Target
2af37303000f5c2be5767c68f36616d8
Size
32KB
MD5
2af37303000f5c2be5767c68f36616d8
SHA1
847d14499d609899d37237c444d16bbcebb8fb4a
SHA256
3f5a346d187c5b2593c3ddbf45cae029ea645bc86ee4894ff135210153363297
SHA512
e22a617fccfe339942d73fbebc0908c03e04adf4654b0888efdd3439bff9dbb26380cdcffc182369157923572aa6ddd71bbac30bc3a6acd18007981032e8c9a5
SSDEEP
384:BBzfrSFsTMp8flmM+wjDmlhelyvd37gogo9rMWl1Wn8tEj:bzksTMu9mM9jRl0LJgo9znOj
Checks for missing Authenticode signature.
resource |
---|
2af37303000f5c2be5767c68f36616d8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateThread
GetProcAddress
GetModuleHandleA
VirtualProtect
GlobalFree
GetLastError
WriteFile
lstrlenA
SetFilePointer
CreateFileA
lstrcatA
GetSystemDirectoryA
GlobalAlloc
lstrlenW
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
RtlUnwind
wsprintfW
wsprintfA
InternetOpenUrlA
InternetOpenA
EventLogon
EventStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ