PIDGenA
PIDGenSimpA
PIDGenSimpW
PIDGenW
SetupPIDGenA
SetupPIDGenW
VerifyPIDSequenceW
Static task
static1
Behavioral task
behavioral1
Sample
badb8babd5185c3e539bd0801c0a9fedd766d55c8ff719004edaa4675f7965a7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
badb8babd5185c3e539bd0801c0a9fedd766d55c8ff719004edaa4675f7965a7.dll
Resource
win10v2004-20240508-en
Target
badb8babd5185c3e539bd0801c0a9fedd766d55c8ff719004edaa4675f7965a7
Size
58KB
MD5
78d7912c288d36c0f4b7c40f103397b6
SHA1
43c0306873a7100313303e0a789d261f2007aefd
SHA256
badb8babd5185c3e539bd0801c0a9fedd766d55c8ff719004edaa4675f7965a7
SHA512
46403aa14ce96faabce4292c3266c0fca7afa97ea4aeaf72061966239ccf8aa681443f25f15090951bf5db8df6ecc245e30d1d5582c65008cba6d1c837627b3e
SSDEEP
384:INiK++JECxM+62Y6rIaffFbmc7IAT/PFpxzs0Biy3jionKvF:Ia+ydnk8aFrVKB
Checks for missing Authenticode signature.
resource |
---|
badb8babd5185c3e539bd0801c0a9fedd766d55c8ff719004edaa4675f7965a7 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
_vsnprintf
__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen
PIDGenA
PIDGenSimpA
PIDGenSimpW
PIDGenW
SetupPIDGenA
SetupPIDGenW
VerifyPIDSequenceW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ