SpInitInstance
SpLsaModeInitialize
Static task
static1
Behavioral task
behavioral1
Sample
4bb579d59830579be9ead9f74a55001e.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4bb579d59830579be9ead9f74a55001e.dll
Resource
win10v2004-20240226-en
Target
4bb579d59830579be9ead9f74a55001e
Size
3.4MB
MD5
4bb579d59830579be9ead9f74a55001e
SHA1
1f827ed629c9e5542ce3975b8e8987e4418a73dc
SHA256
e6a9f0915f82c45626c16672bc99ea57843023be4ecf2f888a5b06f81015c910
SHA512
eeb53210c1af6d8fa16477ee17bd2f3ead84de41f5e49ac5a08aa3b91b9c6d271f1615a9db3a7e54352471ea31885122c4642d77d66ae42d409ddba8ebf7f368
SSDEEP
98304:m5L9m2J0Ub0Y67SjaasBc8yObLJmf+XjIsHixwiYW3x:mx99ph67AaJVyObLw2z22iYw
Checks for missing Authenticode signature.
resource |
---|
4bb579d59830579be9ead9f74a55001e |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
CryptReleaseContext
bind
DnsFree
ord46
GetProcessWindowStation
GetUserObjectInformationW
SpInitInstance
SpLsaModeInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ