GetFormatInterface
UarQueryInterface
UarStreamInterface
Static task
static1
Behavioral task
behavioral1
Sample
c1d5de7b1fa6c95f9cf2bbf820cd4b493a2ef4d76c1f9659b33f55ce4f539153.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1d5de7b1fa6c95f9cf2bbf820cd4b493a2ef4d76c1f9659b33f55ce4f539153.dll
Resource
win10v2004-20240226-en
Target
c1d5de7b1fa6c95f9cf2bbf820cd4b493a2ef4d76c1f9659b33f55ce4f539153
Size
931KB
MD5
c514baf0787a4a72905ec25ba678f237
SHA1
7f38e52c3e3540fcc2ad2e31e13873630f4679af
SHA256
c1d5de7b1fa6c95f9cf2bbf820cd4b493a2ef4d76c1f9659b33f55ce4f539153
SHA512
eec01bd710b0a9e3e958754e1ef32dde7d7d6ace5278afb9a32d2d66219eab07c01865445d3c71c854686e3591c987fb21fb413b223ede007fbb2df8e13458b9
SSDEEP
24576:kiRkOjUPuqZwtx1sEoB6cP37BN8AkrZg:k6JjSQx1SB6cPz8lg
Checks for missing Authenticode signature.
resource |
---|
c1d5de7b1fa6c95f9cf2bbf820cd4b493a2ef4d76c1f9659b33f55ce4f539153 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResetEvent
ReleaseSemaphore
CloseHandle
CreateEventA
CreateSemaphoreA
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
LoadLibraryA
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetCurrentProcessId
GetCurrentThreadId
SetLastError
SetFileTime
GetTickCount
GetModuleHandleW
GetTempPathA
GetTempPathW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryA
GetCurrentDirectoryW
CreateDirectoryA
CreateDirectoryW
RemoveDirectoryA
RemoveDirectoryW
CreateFileW
SetFileAttributesA
SetFileAttributesW
DeleteFileA
DeleteFileW
MoveFileA
MoveFileW
GetFileInformationByHandle
FindClose
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetFileAttributesA
GetFileAttributesW
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
SetEvent
GetFileSize
WriteFile
ReadFile
DeviceIoControl
SetEndOfFile
SetFilePointer
GetHandleInformation
MapViewOfFile
UnmapViewOfFile
CreateFileA
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetCurrentProcess
CompareFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalMemoryStatus
GetProcessAffinityMask
GetSystemInfo
GetSystemTimeAsFileTime
FileTimeToDosDateTime
GetStdHandle
QueryPerformanceCounter
SetProcessAffinityMask
OpenEventA
OpenFileMappingA
GetProcessTimes
QueryPerformanceFrequency
SetConsoleCtrlHandler
GetLocalTime
SetFileApisToOEM
GetVersionExA
Sleep
lstrcatA
SetFilePointerEx
SetStdHandle
GetStringTypeW
LCMapStringW
InitializeCriticalSection
ResumeThread
GetLastError
SetThreadAffinityMask
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExW
IsProcessorFeaturePresent
GetVersion
GetModuleHandleA
VirtualFree
VirtualAlloc
GetProcAddress
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSize
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapFree
HeapAlloc
HeapReAlloc
IsDebuggerPresent
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
RaiseException
RtlUnwind
GetCommandLineA
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
WriteConsoleW
GetMessageA
wsprintfA
CharUpperW
CharUpperA
MsgWaitForMultipleObjects
PeekMessageA
DispatchMessageA
TranslateMessage
LookupPrivilegeValueA
SetFileSecurityW
AdjustTokenPrivileges
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetFileSecurityW
SysAllocString
SysFreeString
VariantCopy
VariantClear
SysAllocStringLen
SysStringLen
MiniDumpWriteDump
GetFormatInterface
UarQueryInterface
UarStreamInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ