AdmDllDeInit
AdmDllInit
AdmDllInitAccessCheck
AdmDllStart
FreeClientSec
FreeServerSec
GetClientNextDataBuf
GetMaxBufferSize
GetRADSecurity
GetServerNextDataBuf
InitClientSec
InitServerSec
MakeSignatureServer
Start
TestUserRight
VerifySignatureClient
Static task
static1
Behavioral task
behavioral1
Sample
2c04b5b983e0e42b801329335061703d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c04b5b983e0e42b801329335061703d.dll
Resource
win10v2004-20231222-en
Target
2c04b5b983e0e42b801329335061703d
Size
353KB
MD5
2c04b5b983e0e42b801329335061703d
SHA1
a6d8565a93ddae79f1f86d2df9bbd8955c0a9920
SHA256
52e6bcaa757fd310cda5021a529642e885f313abe1702a5e13701d1b1b6924cc
SHA512
9c0790469522caa9e8016417133210e6891d0819b28f1fd3679ef88d0d49e9bd23537ade3d3f068ddb323fd2d891defc9ec967f2a565e272c2cdd3801a93011d
SSDEEP
6144:fGUu45cr0JVtVDh01yJcGqFcrDTZQdvOXstC2db5WTAuVN95FmJu5rp:fZFiEDhSyJKKTiistCOoZ
Checks for missing Authenticode signature.
resource |
---|
2c04b5b983e0e42b801329335061703d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FormatMessageA
LoadLibraryExA
WideCharToMultiByte
GetCurrentProcess
MultiByteToWideChar
CloseHandle
lstrlenA
GetCurrentThread
LocalAlloc
FreeLibrary
GetLastError
GetVersion
LocalFree
SetLastError
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetCommandLineA
GetModuleFileNameA
GetStartupInfoA
FlushFileBuffers
RtlUnwind
GetComputerNameA
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
LoadIconA
GetClientRect
SendMessageA
GetDlgItem
EndDialog
UpdateWindow
DialogBoxParamA
SetCursor
LoadCursorA
GetCursor
EnableWindow
MessageBoxA
LookupAccountNameA
RegOpenKeyExA
AddAccessAllowedAce
SetSecurityDescriptorDacl
IsValidSid
SetSecurityDescriptorGroup
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
RegDeleteKeyA
RegCreateKeyA
FreeSid
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
InitializeAcl
RegEnumKeyA
AccessCheck
OpenThreadToken
InitializeSecurityDescriptor
ImageList_ReplaceIcon
ImageList_Create
ord17
AdmDllDeInit
AdmDllInit
AdmDllInitAccessCheck
AdmDllStart
FreeClientSec
FreeServerSec
GetClientNextDataBuf
GetMaxBufferSize
GetRADSecurity
GetServerNextDataBuf
InitClientSec
InitServerSec
MakeSignatureServer
Start
TestUserRight
VerifySignatureClient
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ