DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
1f80291e2899b578b75e2574f34f6c0a11e65865ddbcc94bc9f7c6b402a0908c.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
1f80291e2899b578b75e2574f34f6c0a11e65865ddbcc94bc9f7c6b402a0908c.dll
Resource
win10v2004-20240226-en
Target
1f80291e2899b578b75e2574f34f6c0a11e65865ddbcc94bc9f7c6b402a0908c
Size
83KB
MD5
b9cc827ef606e15fd45aaa3561e67c94
SHA1
c67724e9f98dc0161afe42b944bf036a9a5bec81
SHA256
1f80291e2899b578b75e2574f34f6c0a11e65865ddbcc94bc9f7c6b402a0908c
SHA512
c9255d292abefbfa986a37ff4e1c9c23840814f8250f73a8e9f2c4e9e8528f1fd81c34ac74ecba745413a651c369ee20a8cd163ed2dd074ce75fd2be013c33d2
SSDEEP
1536:5ZSrNnXJbI7k4Q0dNgUnOlwN9bq9TmUORJaKyTO7CA2Fz24moB/j:2rNnXJbIw4djgUtN9bq9IaKf7oF9moZ
Checks for missing Authenticode signature.
resource |
---|
1f80291e2899b578b75e2574f34f6c0a11e65865ddbcc94bc9f7c6b402a0908c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapCreate
VirtualFree
SetHandleCount
SetStdHandle
CloseHandle
SetFilePointer
LoadLibraryA
VirtualAlloc
FlushFileBuffers
HeapAlloc
HeapFree
LeaveCriticalSection
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
lstrcpyA
EnterCriticalSection
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
ord174
ord189
ord188
ord192
ord179
ord166
ord190
ord191
ord201
ord200
DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE