DoRemoveExternalUIStub
RemoveExternalUIStub
Static task
static1
Behavioral task
behavioral1
Sample
df1378b7b5fa7ac19cc7de41668542087dc0af7c1551a11fe0d13a5c7b03fbfd.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
df1378b7b5fa7ac19cc7de41668542087dc0af7c1551a11fe0d13a5c7b03fbfd.dll
Resource
win10v2004-20240412-en
Target
df1378b7b5fa7ac19cc7de41668542087dc0af7c1551a11fe0d13a5c7b03fbfd
Size
1.4MB
MD5
ff4383109f8940da40219e15b9a0b66c
SHA1
8b242ac205fd5fd0dfdea501ebf1c7fc91b9e842
SHA256
df1378b7b5fa7ac19cc7de41668542087dc0af7c1551a11fe0d13a5c7b03fbfd
SHA512
2128d45fa557ef77716a3e6fe96ae90470181cbcaf400874fe64bad04c1bcef187c19c7768fe332a773bb565f756b51760dcc7dc729afc1f28e89b8cef70a524
SSDEEP
24576:a0lPmnp4t4wPlQSZEq5PjlQSZEq5PKlQSZEq5Pn:rYnp4+wTuq5PPuq5Pauq5Pn
Checks for missing Authenticode signature.
resource |
---|
df1378b7b5fa7ac19cc7de41668542087dc0af7c1551a11fe0d13a5c7b03fbfd |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord34
ord145
ord74
ord171
ord125
ord17
ord8
ord47
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
GetShortPathNameW
CreateFileW
WriteFile
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
SetFilePointer
GetConsoleOutputCP
GetLastError
FlushFileBuffers
DeleteFileW
RaiseException
FindClose
GetTempPathW
GetTempFileNameW
FindFirstFileW
FindNextFileW
SetLastError
CreateFileA
GetCurrentProcess
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
WriteConsoleW
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
RtlUnwind
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
ExitProcess
HeapCreate
VirtualFree
VirtualAlloc
ShellExecuteW
ShellExecuteExW
DoRemoveExternalUIStub
RemoveExternalUIStub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ