check
copy
run
Static task
static1
Behavioral task
behavioral1
Sample
28f09a9b6d9d3facfb14d5a7f5193628.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28f09a9b6d9d3facfb14d5a7f5193628.dll
Resource
win10v2004-20231215-en
Target
28f09a9b6d9d3facfb14d5a7f5193628
Size
20KB
MD5
28f09a9b6d9d3facfb14d5a7f5193628
SHA1
a5e83e7fd2dc88c1325b5b3108b69a7594c8e742
SHA256
5ef5d2c862d73db4f2426f6641b2c323ad7f635ebb2f030c84a22c4129480f63
SHA512
f78eb1da0f6281ce1fa6e8fa1047cc92cf857ed472d8f4e6068c4c061357ba07720e378bc55973c1a31187c507d48df85962afa945aef91700fae55d8a3e2c26
SSDEEP
384:+VwmCsIxaT0yQUoVKRflcLy3hzMqkc2+hSaq+avl:IwmLIByQUTaLy3hLkc2+ktNN
Checks for missing Authenticode signature.
resource |
---|
28f09a9b6d9d3facfb14d5a7f5193628 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
HeapReAlloc
GetFileAttributesA
GetTempPathA
MultiByteToWideChar
GetTickCount
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SystemTimeToFileTime
GetLocalTime
SetFilePointer
CreateEventA
HeapAlloc
InterlockedExchange
RtlUnwind
GetModuleHandleA
GetProcAddress
CloseHandle
PulseEvent
GetProcessHeap
GlobalAlloc
LoadLibraryA
VirtualQuery
GetLastError
lstrcpynA
lstrcpyA
GlobalFree
AnyPopup
GetParent
ShowWindow
wsprintfA
CallWindowProcA
DestroyWindow
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
SetWindowTextA
GetDlgItem
GetFocus
IsWindowVisible
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
CreateWindowExW
EnableWindow
SendMessageA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetFilePointer
check
copy
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ