CreateProcessNotify
relolace
Static task
static1
Behavioral task
behavioral1
Sample
70fb632e0a69e828c944f6280eb05087.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70fb632e0a69e828c944f6280eb05087.dll
Resource
win10v2004-20231215-en
Target
70fb632e0a69e828c944f6280eb05087
Size
47KB
MD5
70fb632e0a69e828c944f6280eb05087
SHA1
8aa7c5b41fcfd9a2efb509c1363b99bc744b12df
SHA256
37e085e3a88d4ed10189fb352143c02be60d6dc8f19dbdbb695374dd8ce6cb0f
SHA512
6fec24b20c5634694884b4d648dddfc4cbb1ff1340a8277c0d50735fefeada04e98554bd8830f7ecfd7d7285351e91a9b1fa0552fef0fe0aff7517de0437469b
SSDEEP
768:Xm8UvCgJk8FXqIIjxjM0vJFExTSExy181JNcFsInEJPRI3LheKN5DH1kfAQvYdnS:Q3k89IjxjMAFOT3y18ijEVi3045DHAA0
Checks for missing Authenticode signature.
resource |
---|
70fb632e0a69e828c944f6280eb05087 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SdbTagToString
ImmGetCompositionWindow
SdbReadBinaryTag
FindExecutableA
RealDriveType
PathProcessCommand
CtfImmIsGuidMapEnable
ImmWINNLSGetIMEHotkey
ImmUnregisterWordA
CtfImmGenerateMessage
CtfImmDispatchDefImeMessage
ImmGetRegisterWordStyleA
ImmSetCompositionWindow
DllRegisterServer
SdbFindNextTagRef
CtfImmIsTextFrameServiceDisabled
ShimFlushCache
FreeEnvironmentStringsA
InterlockedCompareExchange
GetEnvironmentStringsA
GetCurrentProcessId
SetThreadExecutionState
ReadFile
CreateFileA
SetCurrentDirectoryA
GetThreadPriorityBoost
SetFilePointer
HeapDestroy
VirtualQuery
RtlFillMemory
GetSystemTimeAsFileTime
SetThreadContext
ExpandEnvironmentStringsA
WriteFileEx
InterlockedExchangeAdd
WriteFile
OpenThread
GetModuleHandleA
ReadFileScatter
MapViewOfFile
GetVersion
lstrcmpA
HeapAlloc
InterlockedExchange
WaitForSingleObject
HeapCreate
GetStringTypeExA
GetFileAttributesExA
WaitForMultipleObjects
HeapSetInformation
CreateFileMappingA
lstrcatA
ConnectNamedPipe
UnmapViewOfFile
CallNamedPipeA
HeapFree
CreateProcessNotify
relolace
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ