DllRegisterServer
Hkv70Kdh
IPlj2HAa
OIP225V1
OftHwD9701
Static task
static1
Behavioral task
behavioral1
Sample
NewInformation.dll
Resource
win7-20240221-en
Target
NewInformation.lc
Size
645KB
MD5
dc01f89f042f88c520f6c93f27ad296d
SHA1
b64304ba5bdd378b6155135b3e3847aa9a04cb34
SHA256
f4f8a14f76055dbe55422ba8754582ed8abf139b7ed33630fa656cb7e879bc7d
SHA512
412ff1ca8fde1ccddebf1f91b06cedf6e50a990a662a5b5ec92f8a5815b1a807ef571faeb836ae724813060d6e7f34bbf2a60bc30ec74606abbdccc70231286f
SSDEEP
12288:zYokNyxh/QFYZLlW0qSQ8qVC6od45xk2SCWise:EdEvoFkRkS/qI6odz2vWi
Checks for missing Authenticode signature.
Processes:
resource |
---|
NewInformation.lc |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateFileA
WriteFile
CloseHandle
GetLastError
HeapCreate
CreateFiber
SwitchToFiber
CreateThread
SuspendThread
ResumeThread
FindFirstFileA
FindNextFileA
FindClose
GetModuleHandleA
GetFileInformationByHandle
DeleteCriticalSection
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryExW
LCMapStringW
GetStdHandle
GetFileType
GetStartupInfoW
MultiByteToWideChar
WideCharToMultiByte
SetLastError
GetCurrentThreadId
GetACP
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
GetCPInfo
IsValidCodePage
GetOEMCP
ExitProcess
GetModuleHandleExW
SetFilePointerEx
CreateFileW
WriteConsoleW
DecodePointer
RaiseException
HeapSize
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
GetModuleFileNameA
FindFirstFileExA
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
DllRegisterServer
Hkv70Kdh
IPlj2HAa
OIP225V1
OftHwD9701
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ