SpInitInstance
SpLsaModeInitialize
Static task
static1
Behavioral task
behavioral1
Sample
dd2d50d2f088ba65a3751e555e0dea71.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dd2d50d2f088ba65a3751e555e0dea71.dll
Resource
win10v2004-20240226-en
Target
dd2d50d2f088ba65a3751e555e0dea71
Size
584KB
MD5
dd2d50d2f088ba65a3751e555e0dea71
SHA1
9c262e87cf692225130bd07e1811859f04794e26
SHA256
777f03eda81f380b0da33d96968dcf9476e6e10459a457f107fec019bc26734b
SHA512
271402640208c366ecdc0f66f919e2bd8a2474428974d38e9412e5129c2f67b8f54d8d28e7b03b109416ac3a3eecb51a8c95b87412e17af0b73d48bf3f325bb8
SSDEEP
12288:T71Z2RQfAxfxllLGqUuJALtIYnFpMhVjGkzug38qVa9YhR:f1DIfzl4uWLtIM6GkzV
Checks for missing Authenticode signature.
resource |
---|
dd2d50d2f088ba65a3751e555e0dea71 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetVersion
PeekNamedPipe
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CryptCreateHash
ntohs
DnsQuery_W
ord27
SpInitInstance
SpLsaModeInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ