GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
Static task
static1
Behavioral task
behavioral1
Sample
7bcaf156b27fdbccb183dfac05db5a66.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7bcaf156b27fdbccb183dfac05db5a66.dll
Resource
win10v2004-20231222-en
Target
7bcaf156b27fdbccb183dfac05db5a66
Size
18KB
MD5
7bcaf156b27fdbccb183dfac05db5a66
SHA1
defa60f6b32433dcccc26dfa9417043de3828a9c
SHA256
704497fa493de1c2bdf3830a1c1980dc0b4d8e99e1cfcc22fa97448eed9e6157
SHA512
cade0e891194443adbed18eead75f5683e7f3a5c558ff733a56c7b4bb6e6a7211232ca924b18e0e7281f7ebd86155665817d4308068a80585a8f6c1c74463081
SSDEEP
384:qX41mcxTFS6dDMNyI9Xm3a7xC+PFqA3OaKgTDiG8BljkW8iwLWPJp:fmcxT/gF923aMUltT5iBGiw2
Checks for missing Authenticode signature.
resource |
---|
7bcaf156b27fdbccb183dfac05db5a66 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
SetFileTime
GetFileTime
TlsGetValue
_lcreat
lstrcmpiA
GetFullPathNameA
lstrcpyA
_lclose
LocalAlloc
LocalFree
_lopen
_lread
GetLastError
_lwrite
_llseek
DeleteFileA
GetFileSize
FreeLibrary
InterlockedExchangeAdd
GetProcAddress
LoadLibraryW
TlsSetValue
LockResource
LoadResource
SizeofResource
FindResourceW
GlobalFree
GlobalUnlock
GlobalLock
LoadLibraryExW
SetErrorMode
IsDBCSLeadByte
lstrlenA
lstrcmpiW
lstrcmpW
lstrcpyW
lstrlenW
CloseHandle
CreateFileW
GetSystemDirectoryW
GetWindowsDirectoryW
MoveFileW
DeleteFileW
GetFileAttributesW
lstrcpynW
WideCharToMultiByte
TlsFree
TlsAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnicodeStringToAnsiString
RtlAllocateHeap
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
NlsMbCodePageTag
RtlFreeAnsiString
RtlInitUnicodeString
RtlxUnicodeStringToAnsiSize
_wcsicmp
wcslen
wcsncpy
wcscpy
RtlUnwind
NtQueryVirtualMemory
wddnaxxggwuw
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ