BbsJcaqlhBgXTKQ
NbzQrgLaNDzBZmJHkVFt
RfPsaaWzLa
YB
bgSKCCCHFmYIUkXR
Static task
static1
Behavioral task
behavioral1
Sample
271d406191414a2fb3816010e96740f4.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
271d406191414a2fb3816010e96740f4.dll
Resource
win10v2004-20231215-en
Target
271d406191414a2fb3816010e96740f4
Size
1.3MB
MD5
271d406191414a2fb3816010e96740f4
SHA1
7f124d707b4a31531087d1a633109e77a73bbc35
SHA256
c6512142574db9c01e967e275bf9fba15f9527aa5688e6f08041bec2ac6f4723
SHA512
c1bb192d07ca2b407475ddc5944b5d2f3da86465cf6f9e0e313d31f506bffcc6d56dfdbef8085a248b09c1c9d2dd5c74bf6f6103167f3452d0b76c56d59a3b8c
SSDEEP
12288:xpYKtxD50NR9QKH4c3BH2yyGClNPxsqdMu2ED+UwYIuOc+ATvLBgfd4lwmQNozOk:sKP50WCBWygOqOED+MI/cjjLekiNozE
Checks for missing Authenticode signature.
resource |
---|
271d406191414a2fb3816010e96740f4 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateProcessA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LockResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
lstrcmpA
___mb_cur_max_func
__dllonexit
__mb_cur_max
_amsg_exit
_beginthreadex
_endthreadex
_errno
_fdopen
_fileno
_fstat64
_initterm
_iob
_lock
_lseeki64
_onexit
_read
_setjmp3
_strdup
_strnicmp
_ultoa
_unlock
_write
abort
atoi
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
isalnum
isspace
iswctype
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
rand
realloc
remove
setlocale
setvbuf
sprintf
strchr
strcmp
strcoll
strerror
strftime
strlen
strncmp
strtoul
strxfrm
time
towlower
towupper
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
BbsJcaqlhBgXTKQ
NbzQrgLaNDzBZmJHkVFt
RfPsaaWzLa
YB
bgSKCCCHFmYIUkXR
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ