Favorobserve4
Streethorse
Thisdecide
Static task
static1
Behavioral task
behavioral1
Sample
please.dll
Resource
win7-20231215-en
Target
please.dll
Size
482KB
MD5
e3149d4aa412560c17a6051d94b3960c
SHA1
755154ac9e1c2df88e92d7c17fbaa2e1ec29b9f8
SHA256
c19ccce75b409643dc722848f71132d580641d75432caed49d44aec358972ec7
SHA512
c6c7a211fec2a94feacc62211744108bb55e235cc7ddd3f948a3ccf87c7f32d7ff39b441e4367a675452ffbb744e13cd344bdbb0e60da1c7bfd8ce950cefb7ad
SSDEEP
6144:Bps0ZfRyzpQTM3juL0Fc8HMuThl3iouaNgOGg3jwgL0SR1Tct78gquLs:BpnZZy1zu0C8sutOaNhT4SR1Cgn
Checks for missing Authenticode signature.
Processes:
resource |
---|
please.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetEnvironmentVariableW
Sleep
GetTempPathW
GetCurrentDirectoryW
VirtualProtectEx
VirtualProtect
HeapAlloc
GetTimeFormatA
GetDateFormatA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
GetTimeZoneInformation
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CompareStringA
CompareStringW
SetEnvironmentVariableA
Favorobserve4
Streethorse
Thisdecide
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ