oblilyfyin
rqwkthatnagt
uocicaxusojsdw
Static task
static1
Behavioral task
behavioral1
Sample
447ced3c16bf918fff3d91f9d9be956c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
447ced3c16bf918fff3d91f9d9be956c.dll
Resource
win10v2004-20231215-en
Target
447ced3c16bf918fff3d91f9d9be956c
Size
120KB
MD5
447ced3c16bf918fff3d91f9d9be956c
SHA1
acb08933e67d9dc31a0146572a0a19a1ab256afc
SHA256
44191940fe3f3a4d509cee969e18d8f29175c80eea684488a501383de6ea512f
SHA512
6db52f9d74f678d5d8ec9daf2bf83c1bdd2b264583a7f04f3ca7eef0378372194fb284475f72fd3e33c5095951ba421d82390cbf2b0da4a27439dd53a5fdd91a
SSDEEP
3072:xht8HHQO0ZR2bWLSBQ2RAIYqqbfAK3AQ1PvUz:x2wO0ZR2b4sRAIY/rn8z
Checks for missing Authenticode signature.
resource |
---|
447ced3c16bf918fff3d91f9d9be956c |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
VirtualAlloc
lstrcmpiA
TerminateProcess
WriteConsoleInputW
HeapAlloc
GetProcessHeap
LoadLibraryA
IsBadReadPtr
DeleteFiber
EnumResourceTypesW
UpdateResourceA
CreateFiberEx
FreeEnvironmentStringsW
GetCurrentProcess
CompareStringW
SetPropA
CombineTransform
ExtFloodFill
CreateCompatibleDC
GetServiceDisplayNameA
GetUserNameW
oblilyfyin
rqwkthatnagt
uocicaxusojsdw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ