F4SEPlugin_Load
F4SEPlugin_Version
Static task
static1
Behavioral task
behavioral1
Sample
e993373cdac8e15bdcbb9435684a61a7bb6783fdd97a5d7dd4eacef50171f2a0.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
e993373cdac8e15bdcbb9435684a61a7bb6783fdd97a5d7dd4eacef50171f2a0.dll
Resource
win10v2004-20240426-en
Target
e993373cdac8e15bdcbb9435684a61a7bb6783fdd97a5d7dd4eacef50171f2a0
Size
468KB
MD5
fb231040f7941380f223778552cf4fdb
SHA1
0ca1b05a79dca15d4ebd1c866e342f89508b963e
SHA256
e993373cdac8e15bdcbb9435684a61a7bb6783fdd97a5d7dd4eacef50171f2a0
SHA512
506ddd959e2e78408a320a56c973a9cc8e0addaec2780f4b0c9b0c4c24c0766f8abd59dfc267c28d1a2b5fd36cdd22f408433f4c672d280f89aff92d92b6f8e9
SSDEEP
6144:Qdoqe/3Bvt2CQAxOUD1ne+0cct5SwLDFkaM5pc6GFDh5FFGohRlWoNX:QSqm3Ft2C3Dnac05LDrM5ps5n6or
Checks for missing Authenticode signature.
resource |
---|
e993373cdac8e15bdcbb9435684a61a7bb6783fdd97a5d7dd4eacef50171f2a0 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetModuleHandleA
GetModuleFileNameA
EnterCriticalSection
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GlobalLock
DeleteCriticalSection
CopyFileW
GetPrivateProfileStringA
GlobalUnlock
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileIntA
GetLastError
ReadFile
GetFileSizeEx
WriteFile
SetEndOfFile
CloseHandle
SetFilePointerEx
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
GetCurrentThreadId
GetPrivateProfileStringW
QueryPerformanceCounter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
VirtualProtect
LocalFree
FormatMessageA
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetStringTypeW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
RtlUnwind
GetClipboardData
GetAsyncKeyState
CloseClipboard
OpenClipboard
SHGetFolderPathW
SHGetFolderPathA
F4SEPlugin_Load
F4SEPlugin_Version
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ