CscNetApiGetInterface
CscSearchApiGetInterface
OfflineFilesEnable
OfflineFilesGetShareCachingMode
OfflineFilesQueryStatus
OfflineFilesQueryStatusEx
OfflineFilesStart
Static task
static1
Behavioral task
behavioral1
Sample
sample.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
sample.dll
Resource
win10v2004-20231215-en
Target
sample.dll.exe
Size
14KB
MD5
031447ef101b64d874ecc9de2f84319a
SHA1
7971cccd816ca84e64c33e85712e6355a55ae507
SHA256
dc8351cb804dc063b27136910868381f2219662a9634a89853f72031de99585a
SHA512
63b31711e089919b0040c538b1d11c69d13d91b004317f2412967f73040a03f924cfda5fee980b40e44df7be8913761160019fc9cd7f423c0fca1ab2072d814b
SSDEEP
192:UF/fNdYd9C4f8V/RUJoSf5DH60pAJR/iuUrBVIKEv:UF/F6C1VwoSf5a00R/x0IKE
Checks for missing Authenticode signature.
resource |
---|
sample.dll.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
MultiByteToWideChar
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
CloseHandle
CreateThread
OpenEventW
CreateEventW
GetCurrentProcess
VirtualAllocEx
WriteProcessMemory
Sleep
OutputDebugStringW
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetProcAddress
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
RtlCaptureContext
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
memset
__std_type_info_destroy_list
__C_specific_handler
memcpy
free
_crt_atexit
_execute_onexit_table
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm
_initialize_narrow_environment
_initterm_e
_register_onexit_function
_initialize_onexit_table
CscNetApiGetInterface
CscSearchApiGetInterface
OfflineFilesEnable
OfflineFilesGetShareCachingMode
OfflineFilesQueryStatus
OfflineFilesQueryStatusEx
OfflineFilesStart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ