regcompA
regcompW
regerrorA
regerrorW
regexecA
regexecW
regfreeA
regfreeW
Static task
static1
Behavioral task
behavioral1
Sample
bd56484bcdf0f6a9a515faa0538fff85779167b5bb2332d4fd2416f499c7a8dd.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd56484bcdf0f6a9a515faa0538fff85779167b5bb2332d4fd2416f499c7a8dd.dll
Resource
win10v2004-20240226-en
Target
bd56484bcdf0f6a9a515faa0538fff85779167b5bb2332d4fd2416f499c7a8dd
Size
229KB
MD5
13b163403529d3b19c5ca6d069fa4569
SHA1
8ea2dd1b3289873197b510672735ace31ed4123c
SHA256
bd56484bcdf0f6a9a515faa0538fff85779167b5bb2332d4fd2416f499c7a8dd
SHA512
f84b4c59616c9a8ac08212e79542e3f567349af7159dd8f6573e75177b9475770cfdb256a675e7e06dd69334b5616be57b1c4288c6d5e89faeedda050b77bab4
SSDEEP
3072:PfE66jkG3GmD62CXOx2MucO/Hjt1gbptnakhlpE1FiOqikkSKit:PfPCGmG2CX6qjt1gbT3lpDdikkSKit
Checks for missing Authenticode signature.
resource |
---|
bd56484bcdf0f6a9a515faa0538fff85779167b5bb2332d4fd2416f499c7a8dd |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
memcmp
memcpy
memmove
memset
__C_specific_handler
__CxxFrameHandler4
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initterm_e
_seh_filter_dll
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
malloc
_callnewh
free
strtol
wcstol
__stdio_common_vsprintf_s
__stdio_common_vswprintf
iswupper
iswxdigit
towlower
wcscpy_s
wcsxfrm
iswpunct
iswprint
iswlower
iswdigit
iswcntrl
iswalpha
tolower
iscntrl
isprint
ispunct
isspace
isxdigit
isdigit
islower
isupper
isalpha
strxfrm
strcpy_s
iswspace
regcompA
regcompW
regerrorA
regerrorW
regexecA
regexecW
regfreeA
regfreeW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ