SpInitInstance
SpLsaModeInitialize
Static task
static1
Behavioral task
behavioral1
Sample
d8e51f1b9f78785ed7449145b705b2e4.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d8e51f1b9f78785ed7449145b705b2e4.dll
Resource
win10v2004-20240226-en
Target
d8e51f1b9f78785ed7449145b705b2e4
Size
601KB
MD5
d8e51f1b9f78785ed7449145b705b2e4
SHA1
c3a4241f8cfe1d0487571f81b6fec4e57c4ae7bd
SHA256
519f100ddc98cfb9aca3e13c0095bddeadf11c50397096953171d042ca376fbd
SHA512
615a8f6aa45692d6c6dd8ea5f92e48af1942ed36e2f4211cdd59620284dc62abab15bb35e9c9ad1d6780a049e7af140a82d9e4a1a4b23ceab1ef685d80b9834c
SSDEEP
12288:OREt9VN2EvGhkPVcsP1yT9ZzPkPKaru0OsxMBmvcrLoYNrCecTnzKL:O+t52EvGhOvPIp5k3ru0OsmBK8LBRCK
Checks for missing Authenticode signature.
resource |
---|
d8e51f1b9f78785ed7449145b705b2e4 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetVersion
GetFileAttributesW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CryptReleaseContext
send
DnsQuery_W
ord60
SpInitInstance
SpLsaModeInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ