CorBindToRuntimeEx
GetRequestedRuntimeInfo
IEE
LoadLibraryShim
LoadStringRC
Static task
static1
Behavioral task
behavioral1
Sample
656582bf82205ac3e10b46cbbcf8abb56dd67092459093f35ce8daa64f379a2c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
656582bf82205ac3e10b46cbbcf8abb56dd67092459093f35ce8daa64f379a2c.dll
Resource
win10v2004-20240319-en
Target
656582bf82205ac3e10b46cbbcf8abb56dd67092459093f35ce8daa64f379a2c
Size
120KB
MD5
e1024b0a0c84c798790dba7a68debb88
SHA1
1059ea2d1a62c2e39affd6481578e575755acb09
SHA256
656582bf82205ac3e10b46cbbcf8abb56dd67092459093f35ce8daa64f379a2c
SHA512
f11663a4b429805922c2850824bfb7e846db227d939f3f4bfac767024e0666d4010a4efeff35ff08bef9dc4d13282efc6206223cf1428876ddcfcb451c81ff18
SSDEEP
3072:cXMpBPJ0EFe1xYQ9MJFlubWBGXD7hof6tiC:ceBB0KuxYQ9uFluaM/hofu
Checks for missing Authenticode signature.
resource |
---|
656582bf82205ac3e10b46cbbcf8abb56dd67092459093f35ce8daa64f379a2c |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
VirtualAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
GetProcAddress
HeapFree
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
IsProcessorFeaturePresent
CorBindToRuntimeEx
GetRequestedRuntimeInfo
IEE
LoadLibraryShim
LoadStringRC
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ