Control
FreeBuffer
Release
Start
Static task
static1
Behavioral task
behavioral1
Sample
751d10595258ef491a13b945299f828f.dll
Resource
win7-20231215-en
Target
751d10595258ef491a13b945299f828f
Size
753KB
MD5
751d10595258ef491a13b945299f828f
SHA1
b1c71d288b876d35162f51d1d9eba926d06f8592
SHA256
b5a82ecb3b02c978287f89f66de23a31e391f6375ba90615fb8446daa349d50d
SHA512
fd49bc18488f616b7796f3490b80d90ef4c4884e13547003e48542dda3a0c2c11dafc4ac7a54688f6b35075d4a5a1a8349ab79ed6c8d365da880b3d9a5536a9e
SSDEEP
12288:29mI6Sob9aao0vLJeqdHDZhXJg+T4TsJO5fIP8Hz6SgwcJvZs2WPQD606+q:qBw9aaoe7NLg+vefI0Hz6SruRHbhZq
Checks for missing Authenticode signature.
Processes:
resource |
---|
751d10595258ef491a13b945299f828f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
GetLastError
HeapFree
HeapSize
HeapReAlloc
HeapAlloc
GetProcessHeap
lstrlenA
lstrcpyA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateThread
DeleteCriticalSection
lstrlenW
LocalFree
lstrcpynA
lstrcmpA
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
HeapValidate
MultiByteToWideChar
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
CloseHandle
GetSystemInfo
LoadLibraryW
HeapCompact
HeapDestroy
UnlockFile
LockFileEx
GetFileSize
GetCurrentProcessId
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
GetConsoleCP
SetStdHandle
GetStringTypeW
GetFileType
SetLastError
GetProcAddress
LoadLibraryA
Sleep
GetConsoleMode
GetModuleHandleA
SetFilePointerEx
WriteConsoleW
UnmapViewOfFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetCurrentProcess
TerminateProcess
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetACP
CompareStringW
LCMapStringW
GetTimeZoneInformation
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStdHandle
Control
FreeBuffer
Release
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ