DrvDisableDriver
DrvEnableDriver
DrvQueryDriverInfo
DrvResetConfigCache
GenerateCopyFilePaths
SpoolerCopyFileEvent
Static task
static1
Behavioral task
behavioral1
Sample
05842de51ede327c0f55df963f6de4e32ab88f43a73b9e0e1d827bc70199eff0.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
05842de51ede327c0f55df963f6de4e32ab88f43a73b9e0e1d827bc70199eff0.dll
Resource
win11-20240709-en
Target
05842de51ede327c0f55df963f6de4e32ab88f43a73b9e0e1d827bc70199eff0
Size
10KB
MD5
dab7a18b02399053ba3ff1e568789fce
SHA1
ceee090c9ee8279d6410d8d450d55acb81d34766
SHA256
05842de51ede327c0f55df963f6de4e32ab88f43a73b9e0e1d827bc70199eff0
SHA512
6dd0ade4112d7ed44c090f81614ed2f1d84cfcb25a45b08d22b3fa74e4e3f9b99f719f8bca9c1f03d13757f38eac072bb4d55e229c478524bf348f76fc3e36dd
SSDEEP
192:I191rqbIcL9uD3nhKlWUEHRl1RtnIDKwIb/DtC0uolZC7:RRgDXhKAUQlftO6tC0uols
Checks for missing Authenticode signature.
resource |
---|
05842de51ede327c0f55df963f6de4e32ab88f43a73b9e0e1d827bc70199eff0 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessAsUserW
SetTokenInformation
DuplicateTokenEx
OpenProcessToken
CreateEnvironmentBlock
DestroyEnvironmentBlock
WinStationEnumerateW
WinStationFreeMemory
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetCurrentProcess
SetLastError
CloseHandle
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
memset
_XcptFilter
malloc
free
_initterm
_amsg_exit
DrvDisableDriver
DrvEnableDriver
DrvQueryDriverInfo
DrvResetConfigCache
GenerateCopyFilePaths
SpoolerCopyFileEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ