GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Static task
static1
Behavioral task
behavioral1
Sample
1163ae0045a914ce65a37eb1646f3513.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1163ae0045a914ce65a37eb1646f3513.dll
Resource
win10v2004-20231215-en
Target
1163ae0045a914ce65a37eb1646f3513
Size
987KB
MD5
1163ae0045a914ce65a37eb1646f3513
SHA1
c229917167ffb903e77e6f61261dbda4dec95920
SHA256
fd93c3258617576a23ba28db527b519e3104e88ba3e6ceb708944c55d6a0e2cc
SHA512
7507b5d08b0aa7bcb1c999e74a2b769719bb45ffc773747245ad6953615742228abeca8de0f44a136bfead83522532ca6fe9d325b86a7647997def6a41021880
SSDEEP
12288:9mzy52sk14W7fnumkiipuuDx6h0QrH6s6iEN6GGvulmcLK:qsk14W7dP7H6s6iEMrt
Checks for missing Authenticode signature.
resource |
---|
1163ae0045a914ce65a37eb1646f3513 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileW
FindFirstFileW
FindNextFileW
GetDriveTypeW
SetFilePointer
WriteFile
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
OpenEventA
Sleep
CreateProcessW
GetModuleFileNameW
lstrcpyW
lstrcatW
lstrlenW
CreateDirectoryW
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
GetLastError
CopyFileW
MoveFileExW
GetCurrentProcessId
lstrcmpiW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetModuleFileNameA
lstrcatA
lstrlenA
MoveFileW
GetCommandLineW
lstrcmpW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
SetStdHandle
HeapQueryInformation
HeapSize
HeapReAlloc
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
GetCurrentThreadId
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
EncodePointer
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
DeleteFileW
ReadFile
HeapValidate
GetSystemInfo
GetCurrentThread
GetStdHandle
GetFileType
OutputDebugStringW
WriteConsoleW
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleCP
GetFileSizeEx
FindClose
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
DecodePointer
wsprintfW
CommandLineToArgvW
StrStrW
PathFileExistsW
StrStrIW
SHSetValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ