Cache
InputFile
PrintFile
Static task
static1
Behavioral task
behavioral1
Sample
a39fde5dd2e3eeee0999bb6cc101861f34ee73d8974bf8e9b1814a10432879d6.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a39fde5dd2e3eeee0999bb6cc101861f34ee73d8974bf8e9b1814a10432879d6.dll
Resource
win10v2004-20240226-en
Target
a39fde5dd2e3eeee0999bb6cc101861f34ee73d8974bf8e9b1814a10432879d6
Size
188KB
MD5
a448d5da2fcddcd396f2b00af8e32c31
SHA1
6e52f689427e438bfa9240299903ffc6fc77baca
SHA256
a39fde5dd2e3eeee0999bb6cc101861f34ee73d8974bf8e9b1814a10432879d6
SHA512
8ee6f3aad08256a0e83772c357dc709e94756dbdf490680c9356a1b015fb867ea699f1189b372d67f5e1230b36422638816813d72df308d32f93f9f0d5c5f3a9
SSDEEP
3072:Cri0+utSCXQJdqByftkViecNemfh0N5Wlu/gX6ASMqsCAn+/B87CVKrNyGTbj:CyrJdqByftkVbgQen+p7obTbj
Checks for missing Authenticode signature.
Processes:
resource |
---|
a39fde5dd2e3eeee0999bb6cc101861f34ee73d8974bf8e9b1814a10432879d6 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord389
malloc
GetSystemDirectoryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
wsprintfA
OpenProcessToken
closesocket
PathIsDirectoryA
CoInitializeEx
VariantChangeType
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
Netbios
Cache
InputFile
PrintFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ