DeviceInternetSettingUi
DeviceInternetSettingUiW
Static task
static1
Behavioral task
behavioral1
Sample
AarSvc.dll
Resource
win10-20240404-en
Target
AarSvc.dll
Size
38KB
MD5
d199682ab29121afb4769bf69f85384e
SHA1
50ce145219d9f8d9aef54fd850c99046c7dfe6e0
SHA256
1a6120426d8ca8ccb9d9dbb5e675fdc704f2c5e365f24b23bf23d29cff16ddee
SHA512
e2fd3f8989d2e61c9e2a1bf2fce23c04d17f4cb38ea8fd5fb762cd939be5a5f1fde403313cb2fb3052ef452a7952d9f83c554020c1bc874ee1f8d4d8c5c4d152
SSDEEP
768:u+lzxo7OaJeeIculAlicTtr9+pjzHnzplpLXekDel/dG974d5GGGGGGGG+l:u6OfFvTF9+pvHzbpLe4GXGGGGGGGG
Checks for missing Authenticode signature.
resource |
---|
AarSvc.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
HeapAlloc
HeapFree
SetLastError
GetProcAddress
GetLastError
HeapReAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
EncodePointer
DecodePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
FlsAlloc
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetStringTypeW
RtlUnwindEx
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapSize
DeviceInternetSettingUi
DeviceInternetSettingUiW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ