?NXSigningResource@@YAXXZ
?XcLoad@@YAXXZ
?XcUnload@@YAXXZ
udop
ufusr
ufusr_ask_unload
Static task
static1
Behavioral task
behavioral1
Sample
ab0adf4ffd0dc6616075760f8bad37b90ba03af83e0d1a46cdd415d173a83597.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab0adf4ffd0dc6616075760f8bad37b90ba03af83e0d1a46cdd415d173a83597.dll
Resource
win10v2004-20240508-en
Target
ab0adf4ffd0dc6616075760f8bad37b90ba03af83e0d1a46cdd415d173a83597
Size
11.9MB
MD5
e5b6861103aecae1af17a8e6dbfdeabb
SHA1
aa7938308392b33b4ec2b0a63e3f13badd81983f
SHA256
ab0adf4ffd0dc6616075760f8bad37b90ba03af83e0d1a46cdd415d173a83597
SHA512
80835b54c16010b083c45e9814bfcd0c0f8f415a5405b64d72fbcecfbb4da0760d3dd72da47f7af8927197ad09f07973823ab7d44f19f8e8e3eedb6b2106f417
SSDEEP
196608:9jphw8Zm2QIpz88Qx64daeiWWee5LmdiKVAJCYP7wTPejWF3lRTohpvZhTvD/:Bphw8IbI9TWWlLmY9QYGScRTorZhTvD/
Checks for missing Authenticode signature.
resource |
---|
ab0adf4ffd0dc6616075760f8bad37b90ba03af83e0d1a46cdd415d173a83597 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
UF_DISP_regenerate_view
?FaceChain@ExtractFaceBuilder@Features@NXOpen@@QEAAPEAVScCollector@3@XZ
UF_UI_unlock_ug_access
?SetTranslucency@SessionVisualizationVisual@Preferences@NXOpen@@QEAAX_N@Z
ord3409
__clean_type_info_names_internal
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
WindowFromPoint
GetProcessWindowStation
GetUserObjectInformationW
CloseFigure
RegDeleteValueA
SHGetPathFromIDListA
ImageList_Draw
PathRemoveExtensionA
CoUninitialize
SysAllocString
InternetOpenA
WSAStartup
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ
PK_EDGE_find_extreme
HidD_SetFeature
SetupDiDestroyDeviceInfoList
GetAdaptersInfo
GetFileVersionInfoA
xlCreateBookA
GetModuleBaseNameA
?NXSigningResource@@YAXXZ
?XcLoad@@YAXXZ
?XcUnload@@YAXXZ
udop
ufusr
ufusr_ask_unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ