?uphvo__tsw_k_rvh@@YGID@Z
?VCEWXOCgAQFjk@@YGPAFM@Z
?Y_PBsi__OWN_vDZ_AFKVI@@YGEM@Z
?_N_XON_XGRPECL_nx@@YGJG@Z
?XHNRXWXACTqn@@YGDF@Z
?_rnwIrs_spz_x_r@@YGPAMIH@Z
?CGPO_GDTXXAJJNcgjd@@YGK_N@Z
Static task
static1
Behavioral task
behavioral1
Sample
70ce24ba5c86d61157a5ea14998b91ca.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70ce24ba5c86d61157a5ea14998b91ca.dll
Resource
win10v2004-20231222-en
Target
70ce24ba5c86d61157a5ea14998b91ca
Size
170KB
MD5
70ce24ba5c86d61157a5ea14998b91ca
SHA1
2c7952b90d53d5465ac059dc33273ee1636f6d6f
SHA256
e209696ef79e704811b92b3416ffaed8542fbc85863490994458cf70c9addd20
SHA512
ba3b255d449f1fc3915d13bea2d069da277e47ce96f37937502d26b648fd598b444c72820f6d9ea99419d6a76ff872fa8af686bafacbb7a9fb24a4a6d9d975ab
SSDEEP
3072:qlyYmt79+ZIgck8+Xw5JpSJYZ0XreQzTiBE+hxjzGQ6:myft7wZIgcOg5LOJTuq6h
Checks for missing Authenticode signature.
resource |
---|
70ce24ba5c86d61157a5ea14998b91ca |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateDiscardableBitmap
SetAbortProc
CreateRoundRectRgn
GetNearestPaletteIndex
GetRgnBox
exit
GetOpenFileNameA
ChooseFontW
RtlInitUnicodeString
ExitProcess
GetSystemDefaultUILanguage
GetUserDefaultLCID
GetConsoleWindow
GlobalFree
SetLastError
lstrcmpiW
FileTimeToLocalFileTime
GetProcAddress
GlobalAlloc
StrStrIW
GetMenuItemID
DrawAnimatedRects
LoadBitmapW
DestroyAcceleratorTable
CreateIconFromResource
ShowScrollBar
GetClassInfoExA
VkKeyScanA
LoadMenuW
DeferWindowPos
GetClientRect
ActivateKeyboardLayout
PtInRect
ImageList_GetIcon
CreatePropertySheetPageA
CreateStatusWindowW
?uphvo__tsw_k_rvh@@YGID@Z
?VCEWXOCgAQFjk@@YGPAFM@Z
?Y_PBsi__OWN_vDZ_AFKVI@@YGEM@Z
?_N_XON_XGRPECL_nx@@YGJG@Z
?XHNRXWXACTqn@@YGDF@Z
?_rnwIrs_spz_x_r@@YGPAMIH@Z
?CGPO_GDTXXAJJNcgjd@@YGK_N@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ