SpInitInstance
SpLsaModeInitialize
Static task
static1
Behavioral task
behavioral1
Sample
ca9b98f17b9e24ca3f802c04eb508103.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca9b98f17b9e24ca3f802c04eb508103.dll
Resource
win10v2004-20240226-en
Target
ca9b98f17b9e24ca3f802c04eb508103
Size
601KB
MD5
ca9b98f17b9e24ca3f802c04eb508103
SHA1
05d21c0c05f1657d89d7522f680e4ccf81674910
SHA256
37c2c89f0165ff3aa1483d0a8ae5c3f0348c8568b4b1cbc0b9e8ff2f803f08a1
SHA512
e77ba4dcde5374a60b2ecc54abadaa24f06e43c00dfe92c3aebf4472fb9098185f34f2abff410509b5d2249072006950551f107a9f291363fd4b5f4a21f6dac1
SSDEEP
12288:OREt9VN2EvGhkPVcsP1yT9ZzPkPKaru0OsxMBmvcrLoYNrCecTnzKLX:O+t52EvGhOvPIp5k3ru0OsmBK8LBRCKb
Checks for missing Authenticode signature.
resource |
---|
ca9b98f17b9e24ca3f802c04eb508103 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetVersion
GetFileAttributesW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CryptReleaseContext
send
DnsQuery_W
ord60
SpInitInstance
SpLsaModeInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ