?NXSigningResource@@YAXXZ
?XcLoad@@YAXXZ
?XcUnload@@YAXXZ
udop
ufusr
ufusr_ask_unload
Static task
static1
Behavioral task
behavioral1
Sample
0a1889b77b1f1075b0e32e9b66f3b4a450facfc9330729ae3be048eae7972eab.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a1889b77b1f1075b0e32e9b66f3b4a450facfc9330729ae3be048eae7972eab.dll
Resource
win10v2004-20240508-en
Target
0a1889b77b1f1075b0e32e9b66f3b4a450facfc9330729ae3be048eae7972eab
Size
12.0MB
MD5
f40f89c12b5c7ae7199f58e04b1f2837
SHA1
8258714d36cdf7661d497c362854f1c573be61ae
SHA256
0a1889b77b1f1075b0e32e9b66f3b4a450facfc9330729ae3be048eae7972eab
SHA512
eceff3c93015c42c9b0c6182401d03d762551164db2639f2d235ec5701c42440322f6f3888b5785d90e38153504de901ba63b51ee4195f0e830077f8486a6106
SSDEEP
196608:bS9uz2hw9eSAxKbmxXllne/M3LiuE0R2RISrEp9ZRAUOsvUJiF2:bUuz2hw9eSc9lnx3c7IXjRAUBvy22
Checks for missing Authenticode signature.
resource |
---|
0a1889b77b1f1075b0e32e9b66f3b4a450facfc9330729ae3be048eae7972eab |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
UF_PART_save_all
?GenerateToolPath@CAMSetup@CAM@NXOpen@@QEAAXAEBV?$vector@PEAVCAMObject@CAM@NXOpen@@V?$allocator@PEAVCAMObject@CAM@NXOpen@@@std@@@std@@@Z
UF_UI_lock_ug_access
?SetTranslucency@SessionVisualizationVisual@Preferences@NXOpen@@QEAAX_N@Z
ord332
__clean_type_info_names_internal
GetVersionExA
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
IsIconic
GetProcessWindowStation
GetUserObjectInformationW
EndPath
RegDeleteValueA
ShellExecuteA
ImageList_Draw
PathCombineA
OleUninitialize
SysAllocString
InternetReadFile
WSACleanup
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ
PK_ENTITY_ask_partition
HidD_GetAttributes
SetupDiGetClassDevsA
GetAdaptersInfo
GetFileVersionInfoA
xlCreateBookA
EnumProcessModules
?NXSigningResource@@YAXXZ
?XcLoad@@YAXXZ
?XcUnload@@YAXXZ
udop
ufusr
ufusr_ask_unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ