DoRemoveExternalUIStub
RemoveExternalUIStub
Static task
static1
Behavioral task
behavioral1
Sample
9c6f08d9c191d3a2a05059d9d877d7bd58825d842f3e45948fa5fbad7d4df3f7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9c6f08d9c191d3a2a05059d9d877d7bd58825d842f3e45948fa5fbad7d4df3f7.dll
Resource
win10v2004-20240419-en
Target
9c6f08d9c191d3a2a05059d9d877d7bd58825d842f3e45948fa5fbad7d4df3f7
Size
138KB
MD5
17197140b7b52bb84400f8e6113e92e2
SHA1
295f4aa8276ddd8348b29a0d15e0c05d3fb12fa4
SHA256
9c6f08d9c191d3a2a05059d9d877d7bd58825d842f3e45948fa5fbad7d4df3f7
SHA512
be413513fce523ce4da9f72f1c1bf76873fd754c7e062dfe2b9e2df028b3b4a2e1f50a8f370d9867b6370d8513dc02ee3d4161291baf34c0428134342b3e770d
SSDEEP
3072:0WhmPs6TzvmuT90x+0iB3RUN4AIFJQ+2B5yOfn2:0ZRTzeskx3y
Checks for missing Authenticode signature.
resource |
---|
9c6f08d9c191d3a2a05059d9d877d7bd58825d842f3e45948fa5fbad7d4df3f7 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord34
ord145
ord74
ord171
ord125
ord17
ord8
ord47
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
GetShortPathNameW
CreateFileW
WriteFile
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
SetFilePointer
GetConsoleOutputCP
GetLastError
FlushFileBuffers
DeleteFileW
RaiseException
FindClose
GetTempPathW
GetTempFileNameW
FindFirstFileW
FindNextFileW
SetLastError
CreateFileA
GetCurrentProcess
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
WriteConsoleW
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
RtlUnwind
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
ExitProcess
HeapCreate
VirtualFree
VirtualAlloc
ShellExecuteW
ShellExecuteExW
DoRemoveExternalUIStub
RemoveExternalUIStub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ