CleanPrereq
ConfigurePrereqLauncher
DoAppSearchEx
DownloadPrereq
EstimateExtractFiles
ExtractPrereq
ExtractSourceFiles
InstallPostPrereq
InstallPrereq
VerifyPrereq
Static task
static1
Behavioral task
behavioral1
Sample
00000121.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00000121.dll
Resource
win10v2004-20240226-en
Target
00000121.dll
Size
287KB
MD5
30ee500e69f06a463f668522fc789945
SHA1
c67a201b59ca2388e8ef060de287a678f1fae705
SHA256
849131d9b648070461d0fa90cbf094e3c149643ceab43d0c834b82f48a2ef277
SHA512
87a0b5aa28a426a156041f050ac9abce2d25efc70570a829fce3831827dc2a426ca5a85acf672519c3c88b463dcdfa9f20ccef46f0eb07e8d04c4e0d9673246d
SSDEEP
6144:lonjRQ57GH/hUjBrBAyE/4AgXH0o8SSHHTRzz:OnjRQ5jBri4pH0nSSHzRX
Checks for missing Authenticode signature.
resource |
---|
00000121.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord145
ord121
ord103
ord90
ord70
ord8
ord17
ord120
ord64
ord116
ord118
ord115
ord166
ord159
ord32
ord205
ord114
ord160
ord74
ord171
ord158
ord52
ord34
ord49
ord140
ord147
ord54
ord139
ord58
ord62
ord47
ord125
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
FindResourceExW
GetSystemTime
CreateFileW
GetFileSize
FindFirstFileW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetWindowsDirectoryW
GetCurrentProcess
ReadFile
GetVersion
GetVersionExW
RaiseException
MultiByteToWideChar
FindClose
WideCharToMultiByte
FormatMessageW
GetTempPathW
GetTempFileNameW
DeleteFileW
FindNextFileW
RemoveDirectoryW
SetLastError
CreateDirectoryW
lstrlenW
CopyFileW
GetLogicalDriveStringsW
GetDriveTypeW
GetDiskFreeSpaceExW
WriteFile
GetEnvironmentVariableW
GetSystemDirectoryW
GetModuleFileNameW
GetModuleHandleW
GetExitCodeThread
CreateThread
CreateEventW
SetEvent
SetFilePointer
MoveFileW
FindResourceW
FlushFileBuffers
ResetEvent
lstrcmpiW
CreateNamedPipeW
ConnectNamedPipe
FindFirstFileA
DeleteFileA
SearchPathW
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExW
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
GetSystemDefaultLangID
GetCurrentProcessId
LocalFree
LocalAlloc
GetCurrentThreadId
GetLocalTime
lstrcpynW
CreateFileA
GetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetLocaleInfoA
LoadResource
SizeofResource
LockResource
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryW
GetStringTypeW
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetStringTypeA
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
Sleep
LoadLibraryA
InterlockedExchange
GetSystemTimeAsFileTime
GetCommandLineA
RtlUnwind
LCMapStringW
GetCPInfo
LCMapStringA
IsDebuggerPresent
FindWindowW
IsWindowVisible
GetDesktopWindow
CharNextW
LookupAccountSidW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
GetSecurityDescriptorDacl
StartServiceW
QueryServiceStatus
OpenServiceW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
CloseServiceHandle
OpenSCManagerW
RegEnumKeyExW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
SHGetMalloc
ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromString
CoCreateInstance
SysAllocString
SysFreeString
VarUI4FromStr
PathUnquoteSpacesW
PathGetArgsW
PathFileExistsW
PathRemoveArgsW
CleanPrereq
ConfigurePrereqLauncher
DoAppSearchEx
DownloadPrereq
EstimateExtractFiles
ExtractPrereq
ExtractSourceFiles
InstallPostPrereq
InstallPrereq
VerifyPrereq
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ