RMACreateInstance
RPCreateAggregatedInstance
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
8df9dfbaa430a23bd4fc425ebb103fc7.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8df9dfbaa430a23bd4fc425ebb103fc7.dll
Resource
win10v2004-20231222-en
Target
8df9dfbaa430a23bd4fc425ebb103fc7
Size
268KB
MD5
8df9dfbaa430a23bd4fc425ebb103fc7
SHA1
2f6c26b6477168eb91ccbe3141429cee413d785b
SHA256
e5fcc39f1e21f8e1a217e8996cbcb0ff0b19e28f86b8f69fa49f12867c317870
SHA512
4ac0b6611ff1298337f6e11f92932f44fe7cc09ea1972e1a86d3647ebceacbe4d2e647796711584d4c0bbb16367ecb1e369c690d2297c4519b192aea85f138be
SSDEEP
3072:+vXMHPgVqicB/OEtFyXuCIxD3BUR9YIcr06WKIU2Ne0hSgUxlp7HVoIpCHjLVLfm:+vtVqCIVaR9YVWKIsgMlp71ZpCDRPEsw
Checks for missing Authenticode signature.
resource |
---|
8df9dfbaa430a23bd4fc425ebb103fc7 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_ismbcspace
memmove
_stricmp
rand
realloc
__dllonexit
_onexit
_initterm
_adjust_fdiv
_ftol
__CxxFrameHandler
_purecall
??3@YAXPAX@Z
free
malloc
_mbctype
strncmp
strstr
strchr
strncpy
toupper
??2@YAPAXI@Z
_putenv
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CharPrevA
GetSystemMetrics
SetWindowLongA
CharNextA
GetMessagePos
BeginPaint
EndPaint
CallWindowProcA
DefWindowProcA
SystemParametersInfoA
GetMessageTime
wsprintfA
GetUpdateRgn
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetProcAddress
GetSystemDirectoryA
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ReleaseMutex
GetLastError
WaitForSingleObject
CreateMutexA
GetCurrentProcessId
RMACreateInstance
RPCreateAggregatedInstance
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ