check
copy
run
Static task
static1
Behavioral task
behavioral1
Sample
12b89a50d5528a73a246920e3034c387.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
12b89a50d5528a73a246920e3034c387.dll
Resource
win10v2004-20231215-en
Target
12b89a50d5528a73a246920e3034c387
Size
19KB
MD5
12b89a50d5528a73a246920e3034c387
SHA1
f04971b2ec13723f6c418e086ced33a2d00b8fe9
SHA256
997550da0a5bdd993fc28b1d3bac02eb6f19c24f83a890a941fc53acde2a4bb1
SHA512
b8a4b9e2de6228a5a28c52257651ed80a272fe47eff137ca44e2c051dd49adc1cb208d50a90eab0c7be95eb5b0374e92c70cff1155845876749ba73364d8042f
SSDEEP
384:VFQ0k4xJuorxnzKd7bWEjufcKSk2mMPpyO17qkc246I1avXe+:VFQ0k4LrxnGFWEyf6mwyO12kc24vMd
Checks for missing Authenticode signature.
resource |
---|
12b89a50d5528a73a246920e3034c387 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapReAlloc
GetFileAttributesA
GetTempPathA
MultiByteToWideChar
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SystemTimeToFileTime
GetLocalTime
SetFilePointer
HeapFree
InterlockedExchange
RtlUnwind
HeapAlloc
GetModuleHandleA
GetProcessHeap
SetEvent
GetProcAddress
GlobalAlloc
LoadLibraryA
VirtualQuery
GetLastError
lstrcpynA
lstrcpyA
CreateEventA
GlobalFree
IsWindow
wsprintfA
CallWindowProcA
DestroyWindow
EnableWindow
CreateWindowExW
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
SetWindowTextA
GetDlgItem
GetFocus
IsWindowVisible
ShowWindow
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
SendMessageA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetFilePointer
check
copy
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ