RRGENCTL
_mFdllinfo
Static task
static1
Behavioral task
behavioral1
Sample
d31c559e1355adcc89fea9ca7e6a54e6ffc12c474230d8deb9c9f28436768237.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
d31c559e1355adcc89fea9ca7e6a54e6ffc12c474230d8deb9c9f28436768237.dll
Resource
win10v2004-20240611-en
Target
d31c559e1355adcc89fea9ca7e6a54e6ffc12c474230d8deb9c9f28436768237
Size
29KB
MD5
b6c9b5636a4502fae40edc0828deaf73
SHA1
e197a6c0e0344ff2fd0d13af3da92764fde125ca
SHA256
d31c559e1355adcc89fea9ca7e6a54e6ffc12c474230d8deb9c9f28436768237
SHA512
76249e7bb08bdaae40ad27508e5d824d7b8a7fbee3ffe1f801c8f7f97dddebbf7dddd08524fa0bfd7fcdd0c34c1d5283ee78ffa2d60ebc126cbf778cee2aea0c
SSDEEP
384:QNncvFqT3KWEe+/J4SoO4o3x5/08vgMTo3Hf/MOiVkJENqFswovD16zoqnnDsRk3:MORxl9s/crqFQqn6HEIDP
Checks for missing Authenticode signature.
resource |
---|
d31c559e1355adcc89fea9ca7e6a54e6ffc12c474230d8deb9c9f28436768237 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_initterm
_adjust_fdiv
_setjmp3
malloc
exit
longjmp
free
sprintf
LoadLibraryA
LocalAlloc
Sleep
GetProcAddress
DisableThreadLibraryCalls
FreeLibrary
GetCommandLineA
GetModuleHandleA
GetLastError
InterlockedExchange
LocalFree
MessageBoxA
CharUpperA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RRGENCTL
_mFdllinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ