FlushBuffer
SaveE
SetLOpt
StartL
StopL
WLELock
WLELogoff
WLELogon
WLEShutdown
WLEStartScreenSaver
WLEStartup
WLEStopScreenSaver
WLEUnlock
Static task
static1
Behavioral task
behavioral1
Sample
8e58b22d8c46567f3df470d8c841cdd2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e58b22d8c46567f3df470d8c841cdd2.dll
Resource
win10v2004-20231222-en
Target
8e58b22d8c46567f3df470d8c841cdd2
Size
10KB
MD5
8e58b22d8c46567f3df470d8c841cdd2
SHA1
9706353228d9a46403387403d0c288c532be4aa6
SHA256
a21019e4f5ebcd25ad079de92f1e92ed77a16e59cdec46cd079dc670b83b468f
SHA512
e8b8d27d426e05cda06ebb36505319bd586ce3472b19af8c0c1b1464fdd173e566af28ca2eedbec524ede469dac90e152bfed9fa4d8dc3536563a23fa8b25b8d
SSDEEP
96:tpEk0VD5S3+fbTVmLJXQirM8fH1HM2b5Ndyd5Y6ZmQM0AqXsGlsfV1j8ispBwBbf:tH0VFbTVeAiAmVH3UXHAQOq8GS+Ub
Checks for missing Authenticode signature.
resource |
---|
8e58b22d8c46567f3df470d8c841cdd2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_mbscmp
memcpy
fclose
fwrite
fopen
memset
_mbsnbcpy
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
time
localtime
strftime
strlen
strcpy
_mbsnbcmp
_mbsrchr
sprintf
WideCharToMultiByte
GetModuleFileNameA
DisableThreadLibraryCalls
SetFileAttributesA
CloseHandle
GetForegroundWindow
SetWindowsHookExA
UnhookWindowsHookEx
GetKeyState
GetAsyncKeyState
CallNextHookEx
GetWindowTextA
CreateProcessAsUserA
FlushBuffer
SaveE
SetLOpt
StartL
StopL
WLELock
WLELogoff
WLELogon
WLEShutdown
WLEStartScreenSaver
WLEStartup
WLEStopScreenSaver
WLEUnlock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ