CanUnload
RMACreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
6605bce0c0b32805fd1d7cce95353d02.dll
Resource
win7-20231215-en
Target
6605bce0c0b32805fd1d7cce95353d02
Size
208KB
MD5
6605bce0c0b32805fd1d7cce95353d02
SHA1
09d2688e660df4185973501b81675e0115bf4c82
SHA256
35779bd0bea160e8cd06d6ec339aa4c3b2a047bc526d1dbb74c8fbc9f1e4645d
SHA512
41941369105d5c812575a6800fea5d1890631409ac30256ae78d9a87fad6f010ffe21a0907eba8c98113942a09eabe7893e21c03fa49be472ef28a5b920589c1
SSDEEP
6144:E8klOt0wWGso8lI6wHkh7lrl3FCnGDm3iL9:kGso8SH2Rl3FCWmk
Checks for missing Authenticode signature.
resource |
---|
6605bce0c0b32805fd1d7cce95353d02 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_unlock
__dllonexit
_lock
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
free
memset
memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_adjust_fdiv
_onexit
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
CanUnload
RMACreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE