AclAviIconicPwr
AutomaticVolumeFullName
BrowseTaskPrompt
DllMain
PathDsUpper
Static task
static1
Behavioral task
behavioral1
Sample
PathCursorServiceEmpty.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PathCursorServiceEmpty.dll
Resource
win10v2004-20231215-en
Target
PathCursorServiceEmpty.dll.exe
Size
185KB
MD5
23448eba3f5f7267b810080bcb04110f
SHA1
5ce062f210e1a5026cb53e9949865312ee477e3c
SHA256
ebe231c90fad02590fc56d5840acc63b90312b0e2fee7da3c7606027ed92600e
SHA512
5fceb3ca684b174c93fc812de22c3204b611a510d91c4b18f3984879fe2ba912406e14a3230e8df189b1a42b972eb716c6b646ecf4e3de8b8581f8dc10442fe4
SSDEEP
3072:EJ2fAdzfVTW8iqVJNDkvA75tuzS+XVGhKkwPgDvFDMtP+XuSO9/zk:EAfAdzJWbGAA5tUXXhIFMP+VO9o
Checks for missing Authenticode signature.
resource |
---|
PathCursorServiceEmpty.dll.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
_mbscmp
calloc
free
malloc
realloc
strcmp
strlen
wcscmp
wcslen
AclAviIconicPwr
AutomaticVolumeFullName
BrowseTaskPrompt
DllMain
PathDsUpper
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ