Arz
Chh
Drm
Hkl
Mqd
Static task
static1
Behavioral task
behavioral1
Sample
1ec2e6a2da36b2125cfdb80517b0c487.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ec2e6a2da36b2125cfdb80517b0c487.dll
Resource
win10v2004-20231215-en
Target
1ec2e6a2da36b2125cfdb80517b0c487
Size
132KB
MD5
1ec2e6a2da36b2125cfdb80517b0c487
SHA1
7b824b09dc41dcecd53b77afdad30deeca3711e5
SHA256
49f70d1e0526f42901f2c377af7cb0105b87a092e16fdec517a81f154f6ce1d8
SHA512
83de753077ccf3d8f8f081d52a2879345333f3f22ecd910b246a556afc075f32ccc0d942c191547a428d58b8e9cd1f87f541d65b5f90a7f0b5bc95dd197827d6
SSDEEP
3072:zjtYz+dl2c2p8bVEslf8WUH5jacb0KMMiU1m9:dYadmMuslf8JHZacb0KNP
Checks for missing Authenticode signature.
resource |
---|
1ec2e6a2da36b2125cfdb80517b0c487 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
QueryServiceStatus
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
InitializeSecurityDescriptor
OpenProcessToken
StartServiceA
SetSecurityDescriptorDacl
OpenServiceA
AdjustTokenPrivileges
RevokeDragDrop
ReleaseStgMedium
ProgIDFromCLSID
CreateBindCtx
CoResumeClassObjects
CoDisconnectObject
CoGetMalloc
lstrcmpiA
lstrcatA
VirtualFree
TlsSetValue
TlsFree
SleepEx
SetCurrentDirectoryA
RtlUnwind
LoadLibraryA
LeaveCriticalSection
InterlockedIncrement
GetStartupInfoA
GetACP
FlushFileBuffers
EnumResourceNamesA
TlsGetValue
Arz
Chh
Drm
Hkl
Mqd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ