InstallPlugin
PluginVersion
TerminatePlugin
Static task
static1
Behavioral task
behavioral1
Sample
b8100ac7f49560c90e652a11624c08a8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8100ac7f49560c90e652a11624c08a8.dll
Resource
win10v2004-20240226-en
Target
b8100ac7f49560c90e652a11624c08a8
Size
95KB
MD5
b8100ac7f49560c90e652a11624c08a8
SHA1
6fc0d8d92a6e77d4b31cd4b6116bfa9e48585949
SHA256
341a240b66dd9ff4ab13342e449ed3e7731482d40613ec35fc30e6df5bce9c29
SHA512
9f1821912d2c35d50f94da2e7cc6c114bf611f9c86d43eb2e3181111c1171041082a463c6121842b8a6b0040b1ffc432d3cd940dc46c9bc47d2b228a75343cb2
SSDEEP
1536:iAnk4shzoW29JNYmmfAogDR2sNRSQ9YAOz+jMZPeERFaysktck0:iWqq9JNY9fZgl2sNbKesWERp
Checks for missing Authenticode signature.
resource |
---|
b8100ac7f49560c90e652a11624c08a8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TlsGetValue
HeapAlloc
HeapFree
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
lstrlenA
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
GetStringTypeA
GetStringTypeW
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer
InstallPlugin
PluginVersion
TerminatePlugin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ