DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
Static task
static1
Behavioral task
behavioral1
Sample
3c6abc0de2447ddd07a988b76b061a162f658aca297a0c16ac612d28f82a043c.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3c6abc0de2447ddd07a988b76b061a162f658aca297a0c16ac612d28f82a043c.dll
Resource
win10v2004-20240226-en
Target
3c6abc0de2447ddd07a988b76b061a162f658aca297a0c16ac612d28f82a043c
Size
29KB
MD5
3b55d6191f46927a760b6bc0f0017303
SHA1
499e330651e0d4d9b9012a99e3684a76a5becaa0
SHA256
3c6abc0de2447ddd07a988b76b061a162f658aca297a0c16ac612d28f82a043c
SHA512
2f7f273f09c071d3f064d8a7e2fd3705e07608721fc3bdddd5276bebeddf38f88a288ea483c0bfbfe433cb9d1b1855f8b1ec9d75e98615acde5fdc7722ce30a1
SSDEEP
384:XzOw5VNMNNwvJ42rKplZvwQyqWXp8yW/kCXp4ZwYtAE7bPbqon8KSE:aZg4Z1jieyMp4Oo9PbX8KF
Checks for missing Authenticode signature.
resource |
---|
3c6abc0de2447ddd07a988b76b061a162f658aca297a0c16ac612d28f82a043c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersion
OutputDebugStringA
ExitProcess
TerminateProcess
VirtualAlloc
HeapAlloc
LoadLibraryA
WriteFile
WideCharToMultiByte
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetCPInfo
GetModuleFileNameA
GetACP
GetStdHandle
GetFileType
GetStartupInfoA
GetCommandLineA
GetProcAddress
GetModuleHandleA
lstrcpyA
VirtualFree
GetCurrentProcess
HeapDestroy
HeapCreate
SetHandleCount
ord201
ord116
ord129
ord192
ord188
ord123
ord189
ord101
ord134
ord282
ord100
ord131
ord163
ord125
ord137
ord141
ord190
ord283
ord191
DllMain
fltDeletePage
fltInfo
fltLoad
fltSave
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ