IternalJob
SetPath
Static task
static1
Behavioral task
behavioral1
Sample
4a49e2f06ba48d3a88fdeb83fb8021f3d165535e8ea5319b16a7ebe4da9c0751.dll
Resource
win7-20240221-en
Target
4a49e2f06ba48d3a88fdeb83fb8021f3d165535e8ea5319b16a7ebe4da9c0751
Size
2.7MB
MD5
c9e37a67f7e3dd3826c23ee04a62ec7b
SHA1
aa157fabb858a9e7ae0d138246545f776934cba7
SHA256
4a49e2f06ba48d3a88fdeb83fb8021f3d165535e8ea5319b16a7ebe4da9c0751
SHA512
5a5912c002f7d06a39bd0f9eba82da32cd7e621e814f1060095d5d56d2a0092ee398499a6a75cb28da773f63b1320f66089ed881a59fb36e8b589deb384e92ea
SSDEEP
49152:+jThLI9aW/+9xRAfRJiN9KtmkP8vfuGia3F2JgN8kupvjgi3M8pp/:+XdO+9x4JiN9umkP8vfuGia3F2JgN8kG
Checks for missing Authenticode signature.
resource |
---|
4a49e2f06ba48d3a88fdeb83fb8021f3d165535e8ea5319b16a7ebe4da9c0751 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetLongPathNameW
LocalFileTimeToFileTime
PeekNamedPipe
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetCurrentThreadId
GetComputerNameExA
SetSystemTime
DeleteFiber
GetModuleFileNameA
GetModuleHandleExA
GetProcAddress
RequestWakeupLatency
ClearCommError
lstrcmpW
LoadLibraryA
LoadLibraryW
SetSystemPowerState
ReleaseActCtx
GetWindowsDirectoryW
GetSystemTimes
IsSystemResumeAutomatic
GetCPInfo
TerminateJobObject
VirtualProtect
QueryIdleProcessorCycleTime
LoadAcceleratorsA
ToAsciiEx
UnregisterClassA
CharUpperA
SetWindowTextA
LoadBitmapW
IsWinEventHookInstalled
CreateMDIWindowW
TranslateMDISysAccel
DestroyCursor
PeekMessageW
ShowScrollBar
SetMapMode
GetTextMetricsW
GetTextExtentPoint32A
IntersectClipRect
ResetDCW
D3DKMTReleaseKeyedMutex
StartDocA
ord171
ord167
ExtractAssociatedIconW
ord2
ObjectStublessClient14
ObjectStublessClient5
ObjectStublessClient6
CoGetMalloc
CoGetCallerTID
OleInitializeWOW
CoUninitialize
OleConvertIStorageToOLESTREAMEx
CoFileTimeToDosDateTime
CoGetInterceptorFromTypeInfo
OleCreateFromData
NdrProxyForwardingFunction10
IternalJob
SetPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ