Control
FreeBuffer
Release
Start
Static task
static1
Behavioral task
behavioral1
Sample
3ea98b7e254fbd913da2be9a47476ac9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ea98b7e254fbd913da2be9a47476ac9.dll
Resource
win10v2004-20231215-en
Target
3ea98b7e254fbd913da2be9a47476ac9
Size
609KB
MD5
3ea98b7e254fbd913da2be9a47476ac9
SHA1
b9324f4cc9a0230ef3aac560ed1dd955f79d50c6
SHA256
9c3e0939627bb8725dbdfc5724cd8f61ebeb2ae0feb6c1f6dacb12b57c11533b
SHA512
519c32da7833013a159374a0036e96e5f3433d33be9a0e6053ae9005f6a20c87e809883da1b826897520d26dc814846c2604df02996719d901a3173d4f6fa6ff
SSDEEP
12288:whl67IcXlFOKSI2ugYFcVv13d526LvHZ/a4KlOVgKt48itNxhgGzyj:whSIYOKXrgYFyvZn26d/a4K4l4Dtv/yj
Checks for missing Authenticode signature.
resource |
---|
3ea98b7e254fbd913da2be9a47476ac9 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
GetLastError
HeapFree
HeapSize
HeapReAlloc
HeapAlloc
GetProcessHeap
lstrlenA
lstrcpyA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateThread
DeleteCriticalSection
lstrlenW
LocalFree
lstrcpynA
lstrcmpA
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
HeapValidate
MultiByteToWideChar
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
CloseHandle
GetSystemInfo
LoadLibraryW
HeapCompact
HeapDestroy
UnlockFile
LockFileEx
GetFileSize
GetCurrentProcessId
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
VirtualQuery
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetStringTypeW
GetFileType
SetLastError
GetProcAddress
LoadLibraryA
Sleep
SetFilePointerEx
GetModuleHandleA
WriteConsoleW
DecodePointer
UnmapViewOfFile
GetTickCount
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlUnwind
RaiseException
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetACP
CompareStringW
LCMapStringW
GetTimeZoneInformation
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStdHandle
Control
FreeBuffer
Release
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ