GetExtensionVersion
HttpExtensionProc
TerminateExtension
Static task
static1
Behavioral task
behavioral1
Sample
fec3871b0947dbe7ed8fd6d066b228f8d99e1948216b4ca8dfa66b1570ab2702.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
fec3871b0947dbe7ed8fd6d066b228f8d99e1948216b4ca8dfa66b1570ab2702.dll
Resource
win10v2004-20240508-en
Target
fec3871b0947dbe7ed8fd6d066b228f8d99e1948216b4ca8dfa66b1570ab2702
Size
57KB
MD5
9726a27fb25ac016a82e81e26db0a277
SHA1
82a43dd935ee7363fef9954f11697aa3255b35c0
SHA256
fec3871b0947dbe7ed8fd6d066b228f8d99e1948216b4ca8dfa66b1570ab2702
SHA512
3e45f8d188d38a71257d8431ad45ae0720da8591bb99d6755435b60cf02cf58c98df2dbbff0e31ef3e1057097013649f745328207cb2f68aac1bd9a4254873d6
SSDEEP
768:Vra/05udAlbkucNlWIaomJpwOw3m0IKg2Gnyv:Vu/OlbknNjOw3m0W2Gnyv
Checks for missing Authenticode signature.
resource |
---|
fec3871b0947dbe7ed8fd6d066b228f8d99e1948216b4ca8dfa66b1570ab2702 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord10
ord64
ord62
ord14
ord1
ord2
ord1
ord3
ord28
ord26
ord25
ord27
ord82
ord67
ord30
ord18
ord54
ord73
ord55
ord38
ord22
ord8
ord9
DisableThreadLibraryCalls
GetExtensionVersion
HttpExtensionProc
TerminateExtension
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ