AccEed
BindAdpter
CalcAdpterQuery
CorBindToRuntimeEx
GetQeeAndSet
GetRequestedRuntimeInfo
HeeLee
IEE
IEE_Query
LoadDrvProfiles
LoadLibraryShim
LoadStringRC
LoadXOrder
Static task
static1
Behavioral task
behavioral1
Sample
284c664b4baff90444c4ed96cfcb4ef6d26cc7aedc46c1e996c359ecea95f697.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
284c664b4baff90444c4ed96cfcb4ef6d26cc7aedc46c1e996c359ecea95f697.dll
Resource
win10v2004-20240226-en
Target
284c664b4baff90444c4ed96cfcb4ef6d26cc7aedc46c1e996c359ecea95f697
Size
128KB
MD5
91131ccf507f61279268fa857ab53463
SHA1
4cc495d48bfb5ac0ce0ee81cb60eeec5a74d2995
SHA256
284c664b4baff90444c4ed96cfcb4ef6d26cc7aedc46c1e996c359ecea95f697
SHA512
0029ac6a5c5d1f641365f1d11a11d936675d2bf686538e249f0747a373d5d68ca3bdda2f56b8d4b586e5e00c4a7e0a39cb329dcca92babc4247a4964b56c1447
SSDEEP
3072:ihT8UDXFVZktbrcdIg/XPpmk2s0K7kbPW/K0ZrGQ7Dy+e61cIyhy4:qT7DXFVetkd1//pmBsHkjeK0ZSOLeiy
Checks for missing Authenticode signature.
resource |
---|
284c664b4baff90444c4ed96cfcb4ef6d26cc7aedc46c1e996c359ecea95f697 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ExitProcess
GetModuleHandleW
SetProcessAffinityMask
SetThreadAffinityMask
QueryThreadCycleTime
QueryProcessCycleTime
QueryPerformanceFrequency
WaitForSingleObject
CreateEventW
VirtualAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RtlUnwindEx
EncodePointer
FlsGetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
HeapFree
Sleep
GetProcAddress
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
WriteFile
GetModuleFileNameW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
AccEed
BindAdpter
CalcAdpterQuery
CorBindToRuntimeEx
GetQeeAndSet
GetRequestedRuntimeInfo
HeeLee
IEE
IEE_Query
LoadDrvProfiles
LoadLibraryShim
LoadStringRC
LoadXOrder
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ