InitializeDriver
InitializeDrv
UnInitializeKernel
Static task
static1
Behavioral task
behavioral1
Sample
912fd695f0cc087eefdf2660319ae3b409275ef794a606089c67dc934df8977f.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
912fd695f0cc087eefdf2660319ae3b409275ef794a606089c67dc934df8977f.dll
Resource
win10v2004-20240226-en
Target
912fd695f0cc087eefdf2660319ae3b409275ef794a606089c67dc934df8977f
Size
247KB
MD5
e1c1a30fc5938c359572e1cc65b4ab7a
SHA1
e43d5e89447b378b4460ee2461a0479d42d61847
SHA256
912fd695f0cc087eefdf2660319ae3b409275ef794a606089c67dc934df8977f
SHA512
f8347a57c7b1fcdbbb52b77c2d7dd08b429d24788755da5dcb67d5d51ea89fac96871a76e65893ffd377eb38c1cd1afba6a2625bc27eddfd937408d7213eabf5
SSDEEP
6144:/YZTWMyzy+DO8cmj6spN7BM78kSR6N9BM7Lt:/yWMyzzZjP7B3g9BK
Checks for missing Authenticode signature.
resource |
---|
912fd695f0cc087eefdf2660319ae3b409275ef794a606089c67dc934df8977f |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseServiceHandle
OpenProcessToken
OpenSCManagerW
OpenServiceW
RegCreateKeyW
RegQueryValueExW
LookupPrivilegeValueW
StartServiceW
QueryServiceStatus
ChangeServiceConfigW
RegOpenKeyExW
AdjustTokenPrivileges
RegCloseKey
RegSetValueExW
wsprintfW
ShellExecuteW
inet_addr
htonl
select
htons
recvfrom
sendto
bind
socket
closesocket
WSAStartup
connect
ioctlsocket
setsockopt
ReadFile
GetProcessHeap
SetEndOfFile
GetStringTypeW
LCMapStringW
HeapReAlloc
SetStdHandle
WriteConsoleW
SetFilePointer
MultiByteToWideChar
GetModuleFileNameW
GetLongPathNameW
GetCurrentProcessId
GetFileSize
FindFirstFileW
FindResourceW
LoadResource
GetCurrentProcess
GetModuleHandleW
GetSystemDirectoryW
LoadLibraryW
Sleep
CopyFileW
SizeofResource
GetVersionExW
CreateFileW
GetLastError
GetProcAddress
LockResource
CloseHandle
DeleteFileW
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
RaiseException
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RtlUnwind
HeapSize
ExitProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeDriver
InitializeDrv
UnInitializeKernel
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ