__NtLockFile@4
__NtOpenFile@0
__NtQueryDirectoryFile@4
Static task
static1
Behavioral task
behavioral1
Sample
8c69540b8cee01445be38861f43affe8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c69540b8cee01445be38861f43affe8.dll
Resource
win10v2004-20231215-en
Target
8c69540b8cee01445be38861f43affe8
Size
33KB
MD5
8c69540b8cee01445be38861f43affe8
SHA1
b4624cbb7438dd8ad83d1ea25706a5988e73a43d
SHA256
0e9a1445941898c6962a8122ea7f05793516a2d7ae7d444ebfa463bff8854a51
SHA512
21dbf01854a45e5f11b38fe3972522479c8271c75c08e8120c7480fd9aac4b8aad7027f7501b0c53ec9bd42f67d4a2de8966a5c5519140eb22bc47e08638b7a8
SSDEEP
768:pPwbjVmkNICtNeOoGVYMzhdzUfkmW0OL/QoIenTff:p4VmVUWGBptUoIO
Checks for missing Authenticode signature.
resource |
---|
8c69540b8cee01445be38861f43affe8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmResetDriverPaging
MmUnlockPagableImageSection
MmPageEntireDriver
MmCreateMdl
MmLockPagableDataSection
ZwFsControlFile
VerSetConditionMask
IoBuildPartialMdl
MmMapVideoDisplay
RtlSetDaclSecurityDescriptor
RtlQueryRegistryValues
RtlUnicodeStringToAnsiString
RtlInitString
RtlCompareString
RtlFreeUnicodeString
ZwSetEvent
KeGetCurrentThread
_vsnwprintf
RtlLookupElementGenericTable
RtlFreeAnsiString
RtlCopyString
_wcsrev
RtlCompareMemory
RtlEqualString
strrchr
KeTickCount
wcsspn
ZwQueryInformationFile
DbgPrintEx
RtlRealPredecessor
ZwEnumerateKey
memset
__NtLockFile@4
__NtOpenFile@0
__NtQueryDirectoryFile@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ