InitializeChangeNotify
PasswordChangeNotify
PasswordFilter
Static task
static1
Behavioral task
behavioral1
Sample
PassFiltEx.dll
Resource
win10v2004-20231215-de
Target
PassFiltEx.dll
Size
134KB
MD5
9098ab4148f404069d013c128ee30dce
SHA1
c9b33896751502e1b2d7dbdb380c639bf1f9ac69
SHA256
88654758133a221bbafd245fb871b8fe1cbf08a6eeb4986826d61831c6d08b63
SHA512
c16767e25d34309b1254dfdd132648958002252847ae77a3eaf6721132d0ddc653d061eef381f8f7670fb35ba096b3f7023deb6fc48b3ab526a0730387b3e2e7
SSDEEP
3072:fcUPIANvS63PxZ1aaOIbQzZy5Im3ghdmvFr9k3M:fX13Jz1/uZLo
Checks for missing Authenticode signature.
resource |
---|
PassFiltEx.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreateFileW
Sleep
GetLastError
QueryPerformanceFrequency
CloseHandle
LeaveCriticalSection
HeapAlloc
GetCurrentDirectoryW
GetProcessHeap
QueryPerformanceCounter
GetFileTime
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
CompareFileTime
CreateThread
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStringTypeW
SetFilePointerEx
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
EventRegister
RegCreateKeyExW
RegGetValueW
EventWriteString
RegCloseKey
InitializeChangeNotify
PasswordChangeNotify
PasswordFilter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ