?GetModuleFileNameA1@@YGXPAD0KEH@Z
?GetModuleFileNameA@@YGXPAD0KEH@Z
?GetModuleFileNameW1@@YGXPAD0KEH@Z
?GetModuleFileNameW@@YGXPAD0KEH@Z
Static task
static1
Behavioral task
behavioral1
Sample
0bb484c2605a1e5c10653fed1c6ee2a5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bb484c2605a1e5c10653fed1c6ee2a5.dll
Resource
win10v2004-20231215-en
Target
0bb484c2605a1e5c10653fed1c6ee2a5
Size
97KB
MD5
0bb484c2605a1e5c10653fed1c6ee2a5
SHA1
83f502e04b2a772e046d27adef63fa58dc826833
SHA256
543c7801af143a88597c421cb586e6d7fea2024ff6aa10cb03e1b2ecc572aff6
SHA512
f922630c37bb6b8bc7dae681fc9ce655c80eb1bde3c707b8d96b04ec1607eaf100aaeb3b9ca17f9c5a04ca364d4c5ef97ab635f7fdc93d1a041947830b686b5e
SSDEEP
1536:vn6Hf+Q32/Tag5TgIUDZf9IEAQNH2c20vZ659KThEzeeLHPQDJo6OHpxIaXi:SHoeg5Tg99IEAQpjmKT+zeAPGJ/OfIa
Checks for missing Authenticode signature.
resource |
---|
0bb484c2605a1e5c10653fed1c6ee2a5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSaveFileNameA
ReplaceTextW
GetTextExtentPointW
ResizePalette
StretchBlt
Rectangle
GetStockObject
StrToIntExA
ChrCmpIW
StrIsIntlEqualA
DeleteAtom
WriteFile
SetFilePointer
GetCurrentProcessId
GetThreadContext
HeapReAlloc
GetCurrentThread
GetStringTypeExW
GetCurrentThreadId
RegisterWindowMessageA
SetForegroundWindow
GetClassNameW
CascadeWindows
ChildWindowFromPointEx
GetDCEx
GetMenuState
DrawStateA
IsDialogMessageW
CreateAcceleratorTableW
LoadStringW
GetClassInfoW
SetWindowPos
?GetModuleFileNameA1@@YGXPAD0KEH@Z
?GetModuleFileNameA@@YGXPAD0KEH@Z
?GetModuleFileNameW1@@YGXPAD0KEH@Z
?GetModuleFileNameW@@YGXPAD0KEH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ