BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
1f80a3039ac8f62ea2746f5670907974.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f80a3039ac8f62ea2746f5670907974.dll
Resource
win10v2004-20231215-en
Target
1f80a3039ac8f62ea2746f5670907974
Size
28KB
MD5
1f80a3039ac8f62ea2746f5670907974
SHA1
f4dcb832d8733650ff3b343a6e8b5d5338f2c563
SHA256
6d0cff52a35d3cac1d30e0d9cddb310430cd6396627a1770f3ed46bb4b835fbd
SHA512
3b18ffc4d58d31c17f3e09987db1e72b0081361279a4d130fe816522005db354e203bde0afe9ab74c11ef2757eeb0b1fbc4e5683d1a7aded4279eee2bff29eb1
SSDEEP
384:UkR2HpU4CSaUNU2445JiEIoxtW5/I7NhehI69duil1vF/:lMZaU6ZA/G/Qr6I6L1vF/
Checks for missing Authenticode signature.
resource |
---|
1f80a3039ac8f62ea2746f5670907974 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE