BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
1414fab0fce45ba210f5d0fe369af4eb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1414fab0fce45ba210f5d0fe369af4eb.dll
Resource
win10v2004-20231215-en
Target
1414fab0fce45ba210f5d0fe369af4eb
Size
24KB
MD5
1414fab0fce45ba210f5d0fe369af4eb
SHA1
18551e71052e109f464ef10c7dbb17fa36e60f08
SHA256
640d000734f68b750cf3207226eac4048a4bd16ad2fe7d67662f57ad7eb04ae3
SHA512
6066a081b44d8f0847b177a26acef9fa451aafe13d90f43fd0d8d45bd6b60dedfee756b9c158ad1692781ea659ec0c4c5c9cd0fead76aef0a169df4c52618c2f
SSDEEP
384:6uZSIQ7hWY4gnSRARIA/bVZ5C4LsrPfVLa6sPHRN/+4FRRBvI:6uZSl9WpgnSMIAjVZ5C4LsrXVOhPf/+6
Checks for missing Authenticode signature.
resource |
---|
1414fab0fce45ba210f5d0fe369af4eb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE