DropNote
NimMain
Static task
static1
Behavioral task
behavioral1
Sample
064179dd776cd2259382d800daf692d1a5f1a5047c519187e4f6ae3021ccf785.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
064179dd776cd2259382d800daf692d1a5f1a5047c519187e4f6ae3021ccf785.dll
Resource
win10v2004-20231222-en
Target
064179dd776cd2259382d800daf692d1a5f1a5047c519187e4f6ae3021ccf785
Size
175KB
MD5
dcc4ba770390f4d3c09675184b2b0a14
SHA1
d3f0ab429040d67d1b61be602c21b934dfa2a054
SHA256
064179dd776cd2259382d800daf692d1a5f1a5047c519187e4f6ae3021ccf785
SHA512
2828afda1b0263b26c87734b29a7f028ccecbb39a9df0cf42d769a53d28fe65bc2622c5ae4837cdcaca9fe3e7ae3d306cb343d17d2cc1e8b10a9ec311899f7f8
SSDEEP
3072:HQn1Tw/j0jbm71GZfXKBRhJQj9cjdYd2DfClFiqzV2mCHMPfG69Ob+JJJ655ZZo9:HChwYK7cfXKjh6Zc2YHjb+JJJ655ZZo9
Checks for missing Authenticode signature.
resource |
---|
064179dd776cd2259382d800daf692d1a5f1a5047c519187e4f6ae3021ccf785 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_fileno
_initterm
_lock
_setjmp
_setmode
_unlock
_wfopen
abort
calloc
exit
fclose
fflush
fputc
free
fwrite
localeconv
longjmp
malloc
memcpy
memset
realloc
setvbuf
signal
strerror
strlen
strncmp
vfprintf
wcslen
DropNote
NimMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ