GetCommand
GetCommandCount
GetFormatVersion
GetPluginDescription
Static task
static1
Behavioral task
behavioral1
Sample
c97a9d0b04232f3dc097ddf3c1e0c032da47b979cb7167c8d96872e09fbab353.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c97a9d0b04232f3dc097ddf3c1e0c032da47b979cb7167c8d96872e09fbab353.dll
Resource
win10v2004-20231215-en
Target
c97a9d0b04232f3dc097ddf3c1e0c032da47b979cb7167c8d96872e09fbab353
Size
2.9MB
MD5
203940333fb24f33d91a48c9d62fc851
SHA1
dd0b48c6252d9fce2704d67f3251abffc5606001
SHA256
c97a9d0b04232f3dc097ddf3c1e0c032da47b979cb7167c8d96872e09fbab353
SHA512
db041c5099c88249d6d40e591aca4bc96b12d4fada930720b6a7d4906406063866c990bf054010c99f315e5516032c09c57a22e400744613f07dd0f37c0db625
SSDEEP
49152:pDCgZenDp/PebPVZFL6+VE+jjYFW05ETgvnDBfFN/Zya+9VPDqaQc:DZen9/WTV3LNE+jd05EOBfT/ZOrqa9
Checks for missing Authenticode signature.
resource |
---|
c97a9d0b04232f3dc097ddf3c1e0c032da47b979cb7167c8d96872e09fbab353 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
PostQuitMessage
PtVisible
OpenPrinterA
ord17
PathFileExistsA
RegOpenKeyExA
SHGetSpecialFolderPathA
strncpy
GetInterfaceInfo
GetMappedFileNameW
GetCommand
GetCommandCount
GetFormatVersion
GetPluginDescription
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ