CheckAdminPrivilege
ConfirmAndReplaceFile
DoExist
Force
GetMajorVersion
GetMinorVersion
GetRevision
IsAdministrator
IsTrial
MasterCall
SetRegVersion
TrialCall
Static task
static1
Behavioral task
behavioral1
Sample
cdaaf98acaf453e331d556fcef7c47933c67f01c12940a15fb3fc38d9ffc3fae.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cdaaf98acaf453e331d556fcef7c47933c67f01c12940a15fb3fc38d9ffc3fae.dll
Resource
win10v2004-20240508-en
Target
cdaaf98acaf453e331d556fcef7c47933c67f01c12940a15fb3fc38d9ffc3fae
Size
60KB
MD5
38856747c87daa62953536cba3679140
SHA1
374cc071e39a4e04b0627ebee474bea149da0d7e
SHA256
cdaaf98acaf453e331d556fcef7c47933c67f01c12940a15fb3fc38d9ffc3fae
SHA512
3362879a2150bc5a890a464cc0dca4be9b1b545d679fca33978ec596f5622989369d630d510bdf7f75d2cbb968f6364d1c1472008348ced82a483304bba4f4bc
SSDEEP
768:aloqrLhs1jzI3JipH+foa/6yKrRiB9vPPyhCUJD2oIRGk:alg3pH+foa/6/K6ZJyo+G
Checks for missing Authenticode signature.
resource |
---|
cdaaf98acaf453e331d556fcef7c47933c67f01c12940a15fb3fc38d9ffc3fae |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
GetModuleFileNameA
FindFirstFileA
WritePrivateProfileStringA
FindClose
CopyFileA
MultiByteToWideChar
GetCurrentDirectoryA
SetHandleCount
GetStdHandle
HeapDestroy
CloseHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
RtlUnwind
GetLastError
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetCommandLineA
GetVersion
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
GetFullPathNameA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStringTypeW
HeapCreate
VirtualFree
VirtualAlloc
SetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetProcAddress
GetModuleHandleA
GetACP
HeapReAlloc
SetFilePointer
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
GetStringTypeA
wsprintfA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CLSIDFromString
StringFromGUID2
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CheckAdminPrivilege
ConfirmAndReplaceFile
DoExist
Force
GetMajorVersion
GetMinorVersion
GetRevision
IsAdministrator
IsTrial
MasterCall
SetRegVersion
TrialCall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ