?NXSigningResource@@YAXXZ
?XcLoad@@YAXXZ
?XcUnload@@YAXXZ
udop
ufusr
ufusr_ask_unload
Static task
static1
Behavioral task
behavioral1
Sample
3f69235004a3009c68ea45d41294b1ff39bde692d2315f45e0483be0cf71f392.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3f69235004a3009c68ea45d41294b1ff39bde692d2315f45e0483be0cf71f392.dll
Resource
win10v2004-20240426-en
Target
3f69235004a3009c68ea45d41294b1ff39bde692d2315f45e0483be0cf71f392
Size
9.2MB
MD5
355cab4090fa5b170addd02877f05ca0
SHA1
068a394010a3ed7adcec815ee889830e644b5b26
SHA256
3f69235004a3009c68ea45d41294b1ff39bde692d2315f45e0483be0cf71f392
SHA512
85ca4276870ba7418fd4e1eec8b58ce6fdef88fdba344f8c6d8d37b8f196d8ceea277329d465d60bea2077cab232ca5b1cf5de991e99113c0812e6e51d1d3e03
SSDEEP
196608:Nz4+ZcaJZiYprALJTQwfiIKkfmrmCCbTkySWO+0:Nz4+ZcSiYxACwfiNZrEZ8+0
Checks for missing Authenticode signature.
resource |
---|
3f69235004a3009c68ea45d41294b1ff39bde692d2315f45e0483be0cf71f392 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UF_GROUP_ask_group_data
?SetRenderingStyle@ShadingViewStyle@Drawings@NXOpen@@QAEXW4ShadingRenderingStyleOption@Preferences@3@@Z
UF_UI_lock_ug_access
?SetTranslucency@SessionVisualizationVisual@Preferences@NXOpen@@QAEX_N@Z
ord3210
__CppXcptFilter
GetVersionExA
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetClipboardData
GetProcessWindowStation
GetUserObjectInformationW
LPtoDP
RegDeleteValueA
SHFileOperationA
ImageList_Destroy
PathCombineA
OleUninitialize
VariantTimeToSystemTime
InternetCloseHandle
gethostbyname
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
PK_EDGE_set_blend_constant
ord47
SetupDiGetDeviceInterfaceDetailA
HidD_GetPreparsedData
GetAdaptersInfo
GetFileVersionInfoA
xlCreateBookA
GetModuleBaseNameA
?NXSigningResource@@YAXXZ
?XcLoad@@YAXXZ
?XcUnload@@YAXXZ
udop
ufusr
ufusr_ask_unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ