?epZzTksdfHGXiefFh@@YGKDI@Z
?xdhjqjvyxs@@YGPAFI@Z
Static task
static1
Behavioral task
behavioral1
Sample
41480f56c60210e7b0bd2a92b240250b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41480f56c60210e7b0bd2a92b240250b.dll
Resource
win10v2004-20231215-en
Target
41480f56c60210e7b0bd2a92b240250b
Size
43KB
MD5
41480f56c60210e7b0bd2a92b240250b
SHA1
b43ddd6bd82961eae16b02562d857b6b270691b4
SHA256
f94887f76b44240d74db6dbb5257ccbc5ba8fb06511a60fbf8c08744ed82f3d5
SHA512
7fbf1eec57bac9fa0e10ab253294359d9ee5cdb1e5a97a57abfaa7cc004c9e7ad570139c5fefeb29a7b615ec52b3e1ea9e6e2d41658940bd9252ea77143b0f8b
SSDEEP
768:xSAhREb0/427pQuQynZZNHnuxyhV5Ddqz5yZDh/5SuWQkpYf6V7:xhRf7pT5uUlJq1Oh/5m7
Checks for missing Authenticode signature.
resource |
---|
41480f56c60210e7b0bd2a92b240250b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CcCopyWrite
RtlInsertUnicodePrefix
SeDeleteObjectAuditAlarm
PsGetVersion
RtlFindNextForwardRunClear
CcPreparePinWrite
KeInitializeEvent
RtlAreBitsSet
KeInitializeDeviceQueue
RtlSetAllBits
RtlRemoveUnicodePrefix
ObGetObjectSecurity
FsRtlNotifyUninitializeSync
MmIsAddressValid
ExAcquireResourceSharedLite
RtlStringFromGUID
RtlEqualSid
RtlFindUnicodePrefix
FsRtlNotifyInitializeSync
IoGetDriverObjectExtension
RtlCharToInteger
ExRaiseDatatypeMisalignment
?epZzTksdfHGXiefFh@@YGKDI@Z
?xdhjqjvyxs@@YGPAFI@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ