_snf@48
snf
Static task
static1
Behavioral task
behavioral1
Sample
eb1181985d4fb740098bb6a094c2561435453cecab6474c9022aa08ee383e18d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
eb1181985d4fb740098bb6a094c2561435453cecab6474c9022aa08ee383e18d.dll
Resource
win10v2004-20231215-en
Target
eb1181985d4fb740098bb6a094c2561435453cecab6474c9022aa08ee383e18d
Size
2.2MB
MD5
af572af9925332f7d84037f25aedd2d0
SHA1
eae49087fb5b485f80267b200522e1f7b120d6c2
SHA256
eb1181985d4fb740098bb6a094c2561435453cecab6474c9022aa08ee383e18d
SHA512
db62aba11a199e71911017a1615bdab2a7dc093b1372c1bc08fcafe7a59e38a93a71082f6e706ea8c45b5e6b841a658ebdf6de48eb59b3a8b44747cc1a34ef20
SSDEEP
49152:5ym8F7T+ODBg61Qjs04tdJeG2DGZOUNIkhDYMK9KIq:c7f+f49b2DsvhMMK9KI
Checks for missing Authenticode signature.
resource |
---|
eb1181985d4fb740098bb6a094c2561435453cecab6474c9022aa08ee383e18d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RtlZeroMemory
GetProcAddress
GetSystemTime
FreeLibrary
SetStdHandle
CompareStringW
CompareStringA
GetStringTypeW
RtlFillMemory
LoadLibraryA
GetModuleFileNameA
GetStringTypeA
GetOEMCP
GetFileAttributesA
VirtualAlloc
VirtualFree
GetFileType
GetLastError
SetErrorMode
Sleep
GetVersionExA
GetLocalTime
GetCurrentProcess
CloseHandle
GetStdHandle
FormatMessageA
DebugBreak
RaiseException
SetLastError
GetCurrentThread
VirtualQuery
MapViewOfFile
CreateFileMappingA
CreateFileA
GetModuleHandleA
ReadFile
SetEndOfFile
SetFilePointer
GetTempFileNameA
GetTempPathA
GetFullPathNameA
GetFileInformationByHandle
DeleteFileA
WaitForSingleObject
SetThreadPriority
CreateProcessA
WriteFile
FlushFileBuffers
GetACP
SetConsoleCtrlHandler
GetCommandLineA
GetVersion
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
TerminateProcess
MultiByteToWideChar
RtlUnwind
HeapDestroy
HeapCreate
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
LCMapStringA
LCMapStringW
SetEnvironmentVariableA
GetCPInfo
SystemTimeToFileTime
_readmas@16
_tabsexists@16
_getnamepar@12
_getstructofpar@20
_makenametab@16
_writetabnotes@16
_changecaptionoftable@12
_writetab@24
LoadMLSString
_getinfoftab@28
_readtab@32
SNFVar
FillCalcS
CloseCalcS
OpenCalcS
_combo@12
_snf@48
snf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ