EnableFortiVSAPI
RegFortiVSAPI
VirusScanAndClean2
VirusScanInit2
VirusScanTerm2
Static task
static1
Behavioral task
behavioral1
Sample
1401d3610d242c3b672b74cffc68ee50N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1401d3610d242c3b672b74cffc68ee50N.dll
Resource
win10v2004-20240704-en
Target
1401d3610d242c3b672b74cffc68ee50N.exe
Size
80KB
MD5
1401d3610d242c3b672b74cffc68ee50
SHA1
27ba0a2697720779d0a10a0950f5cb803c61c7e2
SHA256
907a9fd3b9154a5f0a16be22cc5f527ba834796f0f3e4036a016bf43c3245970
SHA512
c9bc1768781f22fbe5f3530488d77734a788808535a96d828ca7c24df66ccb3fd0ccfdd3fbfa856b283cef666dec81d722805b4f89ff87e95d925ec948fab1b0
SSDEEP
768:PwZduHVlsipeDwQTGJuMQaM2Aqe/kh/HOnxTrU/jOK8FP5DNO9UhoDuKlpbK87sg:5Qwe847byNuxTrUaK89AWYnlpbmg
Checks for missing Authenticode signature.
resource |
---|
1401d3610d242c3b672b74cffc68ee50N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
InterlockedDecrement
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetModuleFileNameW
LoadLibraryW
CloseHandle
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetProcAddress
FreeLibrary
GetLastError
MultiByteToWideChar
lstrlenA
LocalFree
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetFilePointer
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
wsprintfW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
CLSIDFromProgID
CoUninitialize
CoInitialize
CoCreateInstance
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
VariantInit
SysStringLen
SysAllocStringByteLen
SysAllocString
SysFreeString
LoadFCString
EnableFortiVSAPI
RegFortiVSAPI
VirusScanAndClean2
VirusScanInit2
VirusScanTerm2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ