?DeleteClassExW@@IJPAEENM@X
?RtlHeightW@@IJPAXF@X
Static task
static1
Behavioral task
behavioral1
Sample
0b93f96385e5384290d8cc066c3db559.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b93f96385e5384290d8cc066c3db559.dll
Resource
win10v2004-20231215-en
Target
0b93f96385e5384290d8cc066c3db559
Size
52KB
MD5
0b93f96385e5384290d8cc066c3db559
SHA1
8eeb0e1faa0f7db89bb08ec26caa6a70f8afb525
SHA256
92e800f8f6784fe509f6bbb3d77bd81be544bcb7c10da8b9fb98b734caacd7c0
SHA512
f094efe87a81fa1e381c6e1a7420247a99d50fc94de601161c7ec1dd275cc7dd3cdfa508a06c85980dae64c8f546415753773530d6a584bf89f0a78f1b10513c
SSDEEP
1536:qTQoPanID78wPbCPGJoqGtfknluZ9eFZMN0:qTQoynA8wzQ5tfUWAaN0
Checks for missing Authenticode signature.
resource |
---|
0b93f96385e5384290d8cc066c3db559 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
RtlOemStringToUnicodeString
IoRegisterDeviceInterface
IoRemoveShareAccess
CcCopyWrite
ZwQueryValueKey
IoWMIRegistrationControl
MmHighestUserAddress
ExLocalTimeToSystemTime
IoAcquireCancelSpinLock
RtlInitUnicodeString
RtlEqualUnicodeString
ExSystemTimeToLocalTime
SeValidSecurityDescriptor
RtlTimeFieldsToTime
RtlInitializeSid
RtlxUnicodeStringToOemSize
RtlFindLeastSignificantBit
DbgBreakPointWithStatus
ProbeForWrite
?DeleteClassExW@@IJPAEENM@X
?RtlHeightW@@IJPAXF@X
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ