QvrNgBN
UHObXMPnnM
VKkUfFBl
WIDfMEsSy
kiLwzwxl
Static task
static1
Behavioral task
behavioral1
Sample
c238e75ffb3913c4f752271defd84882.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c238e75ffb3913c4f752271defd84882.dll
Resource
win10v2004-20240226-en
Target
c238e75ffb3913c4f752271defd84882
Size
38KB
MD5
c238e75ffb3913c4f752271defd84882
SHA1
50dc1454510d8e9616b63558ca61d0e342c4065d
SHA256
02ccd55da0e172c8187ef4cd3369b56bb6ad70ee34ba3d5576bba43fd7eef7d2
SHA512
a53b36b0c10cfbe06aee71e9f5ab9a7a61839b9e7abcb657bada82812426f6d774f4dce2e70003c1b894113ee1211ccd9f2e27405e19f865d1b81ed9a3697ea4
SSDEEP
768:3MU21aia1/kpRzoHEuo7RAxY8gw3zsDsOHgBm5odd:3x7VGpakuo7RAxY8gwDs4d
Checks for missing Authenticode signature.
resource |
---|
c238e75ffb3913c4f752271defd84882 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RaiseException
GetLastError
GetProcAddress
GetLocalTime
FindAtomA
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
CloseHandle
GetVersion
GetTempPathA
GetSystemTime
lstrcpyA
GetFileSize
lstrcmpA
GetLocaleInfoA
MoveFileExA
FreeLibrary
SystemTimeToFileTime
SetEvent
VirtualFree
GetWindowsDirectoryA
GetVolumeInformationA
CreateEventA
GetSystemDirectoryA
lstrcatA
VirtualAlloc
LoadLibraryA
WritePrivateProfileStringA
MoveFileA
GetCurrentThreadId
ReleaseMutex
GetVersionExA
HeapAlloc
HeapFree
GetProcessHeap
ReadFile
GetTempFileNameA
DeleteFileA
GetThreadContext
VirtualQueryEx
GlobalAlloc
TerminateProcess
GlobalFree
ResumeThread
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
VirtualQuery
RtlUnwind
CreateProcessA
Sleep
OpenProcess
WriteFile
GetTickCount
WaitForSingleObject
lstrcpynA
lstrlenA
CreateFileA
lstrcmpiA
ExitProcess
IsDebuggerPresent
ClientToScreen
SetThreadDesktop
CloseDesktop
OpenInputDesktop
GetThreadDesktop
wsprintfA
InflateRect
SetWindowsHookExA
GetCursorPos
GetCaretPos
PostMessageA
GetWindowRect
GetFocus
FindWindowExA
EqualRect
IsWindowVisible
FindWindowA
GetWindowThreadProcessId
CallNextHookEx
CreateProcessAsUserA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegCloseKey
OpenProcessToken
SHDeleteKeyA
SHDeleteValueA
SHSetValueA
SHGetValueA
QvrNgBN
UHObXMPnnM
VKkUfFBl
WIDfMEsSy
kiLwzwxl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ