BrandingFormatString
BrandingLoadBitmap
BrandingLoadCursor
BrandingLoadIcon
BrandingLoadImage
BrandingLoadString
GetHinstanceByNameSpace
Static task
static1
Behavioral task
behavioral1
Sample
b5afb86c58e5d7d81048489b2393a930.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5afb86c58e5d7d81048489b2393a930.dll
Resource
win10v2004-20240226-en
Target
b5afb86c58e5d7d81048489b2393a930
Size
488KB
MD5
b5afb86c58e5d7d81048489b2393a930
SHA1
1d13dcd9f17d527537d84eaacc7e4143f2c2ed50
SHA256
3841231191224d6788e0836a7fb147d3f09d35b1b95a3bbcdb43e4baef40f8b7
SHA512
1338555e9d271a23660b6d1191a251a91e02b01fec26511a940465b6a0586d045309002d64cf45d24597081779cbf4629b29908079730bd6976a936493ac4c1f
SSDEEP
12288:x1x2xZdC417R/jAfSXI8JkHyu0LqpGA/Z1sgEGLAN:xqxZdzBqwK/0Li2GLAN
Checks for missing Authenticode signature.
resource |
---|
b5afb86c58e5d7d81048489b2393a930 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
memset
rewind
AbortPath
PlayEnhMetaFileRecord
PathIsDirectoryEmptyW
BeginDeferWindowPos
IsWow64Message
GetDCEx
DdeSetUserHandle
UnhookWinEvent
DdeClientTransaction
GetConsoleDisplayMode
FindVolumeMountPointClose
WriteProfileStringA
RpcBindingInqAuthInfoA
RpcErrorStartEnumeration
RpcSsContextLockExclusive
EqualSid
QueryServiceConfig2W
RasGetEapUserIdentityW
BrandingFormatString
BrandingLoadBitmap
BrandingLoadCursor
BrandingLoadIcon
BrandingLoadImage
BrandingLoadString
GetHinstanceByNameSpace
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ