LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
47dbef16bf7b97ec9eae86063b3dfffbe49cc7ef5ce09481388b21919056fdba.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
47dbef16bf7b97ec9eae86063b3dfffbe49cc7ef5ce09481388b21919056fdba.dll
Resource
win10v2004-20240412-en
Target
47dbef16bf7b97ec9eae86063b3dfffbe49cc7ef5ce09481388b21919056fdba
Size
35KB
MD5
73b0909c8c43e85d6aee2af9bfc35b02
SHA1
b32d1b89a06f7aed23afb0fa31c314386c7fe6c9
SHA256
47dbef16bf7b97ec9eae86063b3dfffbe49cc7ef5ce09481388b21919056fdba
SHA512
53dadd1fef46d5f12124acdc6302a000b4786ced33c41c98e81c56d5f347c1047f4fefdcfc893d8d3bdd5c6e433188b9b2cdbf9f43b75f4e840f7d3f860ba34a
SSDEEP
768:WfirwGxYoTm816hrAmlMZtMtA40hf7DMyRiy:si/Q/lMAtANl
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_MPress |
Checks for missing Authenticode signature.
resource |
---|
47dbef16bf7b97ec9eae86063b3dfffbe49cc7ef5ce09481388b21919056fdba |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
GetProcAddress
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
GetLastError
CreateMutexA
lstrcmpiA
GetModuleFileNameA
WaitForSingleObject
GetTickCount
GetLogicalDrives
FindClose
FindNextFileA
SetFileAttributesA
CopyFileA
GetFileAttributesA
FindFirstFileA
lstrcpyA
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
FreeLibrary
SetEvent
CreateEventA
DisableThreadLibraryCalls
LoadLibraryA
lstrcatA
GetSystemDirectoryA
ord64
PathFindExtensionA
PathAppendA
PathFindFileNameA
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ