__ZwLockFile@8
__ZwQuerySecurityObject@4
__ZwUnlockFile@4
Static task
static1
Behavioral task
behavioral1
Sample
9a928ca410426d647db5ede0c96075c2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a928ca410426d647db5ede0c96075c2.dll
Resource
win10v2004-20231215-en
Target
9a928ca410426d647db5ede0c96075c2
Size
30KB
MD5
9a928ca410426d647db5ede0c96075c2
SHA1
ebffe624c20ca0721090a0d6dc4c15506e1bf4ab
SHA256
e24930916c5f02021f6bddb71e8f03737d060c2efd4982a87c3ce8a8820db417
SHA512
9606f3b989c55465bd6c461c0dea418364658bb2c451a65bbc05130eb855869c6ac2c5731898ca87d07c04023fca808e01e0236ab969ccb2bf62fd2423cf9262
SSDEEP
384:FLnif+j6aidFJ2FPvgrJe103G+LnA249QE6TuXLHHocbbjb41gt2c6gh3KMwwLWy:FDAa67f2FXcc3Q8XLHXbbHUfw3KEaTf0
Checks for missing Authenticode signature.
resource |
---|
9a928ca410426d647db5ede0c96075c2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IoBuildDeviceIoControlRequest
ZwFsControlFile
VerSetConditionMask
RtlUnicodeStringToAnsiString
_strupr
RtlCompareString
ZwSetEvent
RtlLookupElementGenericTable
RtlFreeAnsiString
strrchr
wcsspn
ZwQueryInformationFile
RtlRealPredecessor
__ZwLockFile@8
__ZwQuerySecurityObject@4
__ZwUnlockFile@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ