cfds
fdsce
yitrer
Static task
static1
Behavioral task
behavioral1
Sample
de69a72b4e091ee8666ddd1510502f46.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de69a72b4e091ee8666ddd1510502f46.dll
Resource
win10v2004-20240226-en
Target
de69a72b4e091ee8666ddd1510502f46
Size
40KB
MD5
de69a72b4e091ee8666ddd1510502f46
SHA1
9a5da48ef6fa37e5820d8af426ff0e98d69627da
SHA256
b779944b6ec7094524fa093f47c9a3849586986899d790e8956c70e6195a7159
SHA512
95be66afdba4843d6ed8ab99c5c20d3f0089bab8dc99a113a704a8f8be6a37921f7f0895db4dbd09d73e776858ca67acaf34f2b71ac57d51edf39f8b220dde00
SSDEEP
768:ThjyjmUUYhNWN38De/0K6mcQLhERid9DC:8mUUBmsjLhFC
Checks for missing Authenticode signature.
resource |
---|
de69a72b4e091ee8666ddd1510502f46 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
WriteFile
DeleteFileA
InitializeCriticalSection
VirtualProtectEx
VirtualProtect
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
IsBadReadPtr
SetUnhandledExceptionFilter
SetThreadContext
OpenThread
MultiByteToWideChar
TerminateProcess
CreateProcessA
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
ExitProcess
GetCommandLineA
Sleep
VirtualAllocEx
TerminateThread
CreateThread
GetCurrentProcessId
CreateMutexA
GetLastError
GetModuleHandleA
LoadLibraryA
ReadProcessMemory
GetProcAddress
GetWindowTextA
CallNextHookEx
GetAsyncKeyState
ToAscii
GetWindowThreadProcessId
__CxxFrameHandler
_strupr
_strcmpi
_stricmp
_strlwr
strchr
strcat
sprintf
strcpy
strlen
strncpy
strstr
memset
memcpy
strcmp
??2@YAPAXI@Z
wcslen
strrchr
??3@YAXPAX@Z
cfds
fdsce
yitrer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ