SbieApi_Log
_SbieDll_Hook@12
Static task
static1
Behavioral task
behavioral1
Sample
c9ed69e7bf233ba1edd18a1f91671faee9b7756aa77fe517319098706e78cde5.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9ed69e7bf233ba1edd18a1f91671faee9b7756aa77fe517319098706e78cde5.dll
Resource
win10v2004-20240226-en
Target
c9ed69e7bf233ba1edd18a1f91671faee9b7756aa77fe517319098706e78cde5
Size
40KB
MD5
40e3e86c68425defcb67faacae1d1bda
SHA1
c4990d44897dfcff32bb72ce52128d008bc88657
SHA256
c9ed69e7bf233ba1edd18a1f91671faee9b7756aa77fe517319098706e78cde5
SHA512
a5f4542c650a38016cbe1f3792a85687d4b7d879933abc1d05e7ec632fc37ee90e6674e4c2a21e191bb146c298e3328013554cbb63a37028e120a994eaf4e793
SSDEEP
768:MWBOxWV2NOzZ6zXFD5sazhJJ+naEDtOmxWyz+C:7BOxooXF5/1QCl8+C
Checks for missing Authenticode signature.
resource |
---|
c9ed69e7bf233ba1edd18a1f91671faee9b7756aa77fe517319098706e78cde5 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileSize
CreateFileA
WriteFile
CloseHandle
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
HeapAlloc
RaiseException
GetLastError
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
LoadLibraryW
RtlUnwind
IsProcessorFeaturePresent
SbieApi_Log
_SbieDll_Hook@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ