SHGetFolderPathA
SHGetFolderPathW
Static task
static1
Behavioral task
behavioral1
Sample
1532de8f229c584ec1859ffd7ad2e715792fa542e9115ec82ee50c7e69a1c308.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1532de8f229c584ec1859ffd7ad2e715792fa542e9115ec82ee50c7e69a1c308.dll
Resource
win10v2004-20240704-en
Target
1532de8f229c584ec1859ffd7ad2e715792fa542e9115ec82ee50c7e69a1c308
Size
34KB
MD5
7385832ac8719c67d99297f30748c1fa
SHA1
dad0336f0c9370577952b55859ce21ba05b9d1ce
SHA256
1532de8f229c584ec1859ffd7ad2e715792fa542e9115ec82ee50c7e69a1c308
SHA512
e52915f9a3bfa049ba3a45be95e33443f512dc5eeacf8dcee08379f088f07067433195821bcc078918042509c76d8ca3cdf6136e3e545cad700563308724a065
SSDEEP
96:Izuo08ZWVv7jQkIqBz5H7y0ilsFrZHvvYrO:I3PWVDj7Y/+VZ3YrO
Checks for missing Authenticode signature.
resource |
---|
1532de8f229c584ec1859ffd7ad2e715792fa542e9115ec82ee50c7e69a1c308 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DisableThreadLibraryCalls
SHGetFolderPathA
SHGetFolderPathW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ