DriverProc
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
74f1a7de748c4bf61591b6e51804241f.dll
Resource
win7-20231215-en
Target
74f1a7de748c4bf61591b6e51804241f
Size
18KB
MD5
74f1a7de748c4bf61591b6e51804241f
SHA1
48b406bf7adef6fc2a7adc2e0db45af176f6aa02
SHA256
2a1b3f989b94468e997295f948f47cbfa043cbc30d225dc82c18979cc93d6965
SHA512
9e9fcaa2e9256567a65c58c59b5c75554112d45d1c8bf344eb37baaa566c11cfcc922b86b30a5281fdb8528af830ad28bc8773b721b1197928b0235a0e05f02d
SSDEEP
384:YviTWTbWDHjvHyHeWuthiKz23erGTek2PAj7Yv4daWWmx2WS:Yv+vStrOr+2PAjhK
Checks for missing Authenticode signature.
Processes:
resource |
---|
74f1a7de748c4bf61591b6e51804241f |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
malloc
_initterm
free
memmove
LoadStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryA
CloseHandle
CreateMutexW
DisableThreadLibraryCalls
ReleaseMutex
WaitForSingleObject
LocalAlloc
LocalFree
lstrcpyW
lstrlenW
GetWindowsDirectoryW
GlobalFree
GlobalUnlock
lstrcmpiW
lstrlenA
GlobalHandle
lstrcatW
GlobalLock
GlobalAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
RegOpenKeyW
RegQueryValueExW
RegCloseKey
midiOutReset
mmioRead
mmioSeek
midiStreamOut
midiStreamProperty
midiStreamPause
DefDriverProc
mmioClose
mmioAscend
mmioDescend
mmioOpenW
midiOutMessage
midiOutGetDevCapsW
DriverCallback
midiOutClose
midiOutOpen
midiStreamOpen
midiOutUnprepareHeader
midiOutPrepareHeader
midiStreamClose
midiStreamPosition
midiOutSetVolume
midiOutShortMsg
midiOutLongMsg
midiOutCacheDrumPatches
midiOutCachePatches
midiStreamStop
midiStreamRestart
DriverProc
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ