hook
unhook
winl
winl_
Static task
static1
Behavioral task
behavioral1
Sample
4a1379adc469737340bec020bb92a872.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4a1379adc469737340bec020bb92a872.dll
Resource
win10v2004-20231215-en
Target
4a1379adc469737340bec020bb92a872
Size
32KB
MD5
4a1379adc469737340bec020bb92a872
SHA1
020c7a267a6cfe293ea01f8c6a22e63fc949cb48
SHA256
2e7d7b27cc10865ec115d1049d07e3f6d2d304a83c2e2884c748ce401760bae5
SHA512
af3438e1f3bd4225f2c6103a8140a8f34006d508ede97bdd68cf62e1f7752df3a2dac5811d9667a5be02a5c992da6d027c5bdd83904341379a143e286fce8924
SSDEEP
768:ICz5XrioyuJendIB+Mh1o7CqkSDjOTkMOasDSruCwrAZ:/5undIXmkSOzQ9cZ
Checks for missing Authenticode signature.
resource |
---|
4a1379adc469737340bec020bb92a872 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ShowWindow
CreateCompatibleDC
RegQueryValueExA
CoUninitialize
SysAllocStringLen
hook
unhook
winl
winl_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE