GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
Static task
static1
Behavioral task
behavioral1
Sample
c5b0740c00ceb3a62fefc75550735ee8.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c5b0740c00ceb3a62fefc75550735ee8.dll
Resource
win10v2004-20240226-en
Target
c5b0740c00ceb3a62fefc75550735ee8
Size
18KB
MD5
c5b0740c00ceb3a62fefc75550735ee8
SHA1
729c932138df8c736c926f44782187d34f633f09
SHA256
4f196676e34e18d98b6f820f55fefa8b40272161868cd6aa959f3318a1e1dad9
SHA512
e35da75b4604258ae2af08432be88da1ab5c514ad8c3a6e272700340d26bb318d46e73d778d8a7712a988799ba4c8d2473cd8746af38b56dd9457128cbb56b43
SSDEEP
384:qg41mcxTFS6dDMNyI9Xm3a7xC+PFqA3OaKgTDiG8BljsW8iwLWPJp:mmcxT/gF923aMUltT5iBeiw2
Checks for missing Authenticode signature.
resource |
---|
c5b0740c00ceb3a62fefc75550735ee8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
SetFileTime
GetFileTime
TlsGetValue
_lcreat
lstrcmpiA
GetFullPathNameA
lstrcpyA
_lclose
LocalAlloc
LocalFree
_lopen
_lread
GetLastError
_lwrite
_llseek
DeleteFileA
GetFileSize
FreeLibrary
InterlockedExchangeAdd
GetProcAddress
LoadLibraryW
TlsSetValue
LockResource
LoadResource
SizeofResource
FindResourceW
GlobalFree
GlobalUnlock
GlobalLock
LoadLibraryExW
SetErrorMode
IsDBCSLeadByte
lstrlenA
lstrcmpiW
lstrcmpW
lstrcpyW
lstrlenW
CloseHandle
CreateFileW
GetSystemDirectoryW
GetWindowsDirectoryW
MoveFileW
DeleteFileW
GetFileAttributesW
lstrcpynW
WideCharToMultiByte
TlsFree
TlsAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnicodeStringToAnsiString
RtlAllocateHeap
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
NlsMbCodePageTag
RtlFreeAnsiString
RtlInitUnicodeString
RtlxUnicodeStringToAnsiSize
_wcsicmp
wcslen
wcsncpy
wcscpy
RtlUnwind
NtQueryVirtualMemory
lmucvertys
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueIndexA
VerQueryValueIndexW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ