Born
Fitsecond
Pastput
Static task
static1
Behavioral task
behavioral1
Sample
631779ef3aecb4838360304f162dbd8c.dll
Resource
win7-20231129-en
Target
631779ef3aecb4838360304f162dbd8c
Size
643KB
MD5
631779ef3aecb4838360304f162dbd8c
SHA1
9103735e9771b40fb26b5b273683934dfea38402
SHA256
a4c7d46ab94add85adc74f9686c7367fd82eaae508b3e2227db8e62930fb3da0
SHA512
37a4008e70e99cdd182f95719a481ab811bd35867cae2c38c7c79cef406da7d6872762e1a79798a3a129f66c5326b3487e58a923214299d9410a044b5d14c667
SSDEEP
12288:HMUpikM1ABVY4lsBnllWzwazxRvwe9QKC71L715+PoR5nFIlW2i:K4Y4lglQzwyxRvwySJLT5FIV
Checks for missing Authenticode signature.
Processes:
resource |
---|
631779ef3aecb4838360304f162dbd8c |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OpenProcess
GetSystemDirectoryW
LoadLibraryW
Sleep
GetVersionExW
CreateFileW
GetTempPathW
GetCurrentDirectoryW
GetProcAddress
VirtualProtectEx
GetSystemTime
GetVolumeInformationW
GetModuleHandleW
CreateFileA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
LoadLibraryA
QueryPerformanceCounter
LoadResource
FreeLibrary
FindResourceW
GetDateFormatW
GetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
CloseHandle
SetFilePointer
ReadFile
VirtualAlloc
HeapReAlloc
HeapSize
HeapAlloc
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
SetHandleCount
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetStringTypeA
IsValidCodePage
GetOEMCP
GetACP
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCurrentThreadId
GetCommandLineA
GetCPInfo
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
LCMapStringW
LCMapStringA
GetLastError
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
ExitProcess
GetModuleHandleA
EndDeferWindowPos
ReleaseCapture
EndDialog
IntersectRect
OffsetRect
LoadIconW
CloseClipboard
GetMessageA
WindowFromPoint
ExitWindowsEx
GetDoubleClickTime
InflateRect
CreateCompatibleDC
PtVisible
CreateFontW
CreateRectRgn
GetPixel
SelectClipRgn
OleInitialize
OleUninitialize
CoRegisterSurrogate
CoInitialize
CoRegisterClassObject
CoUninitialize
SetupGetSourceInfoW
SetupRemoveFromSourceListW
SetupQueryInfVersionInformationW
SetupSetSourceListW
SetupQuerySourceListW
SetupCancelTemporarySourceList
SetupIterateCabinetW
SetupCopyOEMInfW
SetupGetStringFieldW
SetupDefaultQueueCallbackW
SetupTermDefaultQueueCallback
SetupSetPlatformPathOverrideW
SetupGetIntField
SetupQueueDefaultCopyW
SetupQueueCopyW
SetupQueueDeleteW
SetupGetLineByIndexW
SetupPromptReboot
SetupAddToSourceListW
SetupFreeSourceListW
SetupQuerySpaceRequiredOnDriveW
SetupGetFieldCount
SetupQueueRenameW
SetupGetLineCountW
SetupGetLineTextW
SetupGetTargetPathW
Born
Fitsecond
Pastput
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ