_Close
_CopyKey
_CopyValue
_CreateKey
_DeleteKey
_DeleteKeyEmpty
_DeleteValue
_Find
_HexToStr
_HexToStrUTF16LE
_KeyExists
_MoveKey
_MoveValue
_Open
_Read
_ReadExtra
_RestoreKey
_SaveKey
_StrToHex
_StrToHexUTF16LE
_Unload
_Write
_WriteExtra
Static task
static1
Behavioral task
behavioral1
Sample
cfe00e419330355a103190ed65f3cc40N.dll
Resource
win7-20240708-en
Target
cfe00e419330355a103190ed65f3cc40N.exe
Size
105KB
MD5
cfe00e419330355a103190ed65f3cc40
SHA1
e5ca9c04d74befac9690c948ba3a7e6fee2fa557
SHA256
18613349c04a70086b3ce301c1bae1d24e358beefc4ce0f47dd0d038fab3cef1
SHA512
e33c6e435041969650066ab60b218f0e78f10f2da541dd9922de82ddd5d1a99a612e28e45caf986ffc3f0e30800158759142fd24448efc09b48611ea289cb3ea
SSDEEP
3072:Kt5Ir02FtRSwAk2lQBV+UdE+rECWp7hK5XLofJD:KnIr02FSwACBV+UdvrEFp7hKBMp
Checks for missing Authenticode signature.
resource |
---|
cfe00e419330355a103190ed65f3cc40N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
lstrcpyW
FindClose
FindFirstFileW
lstrcmpW
GetFileSize
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
WriteFile
CloseHandle
lstrlenW
lstrcpynW
lstrcmpiW
lstrcatW
GlobalAlloc
ReadFile
GlobalFree
wsprintfW
CharUpperW
SendMessageW
FindWindowExW
GetDlgItem
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegCloseKey
_Close
_CopyKey
_CopyValue
_CreateKey
_DeleteKey
_DeleteKeyEmpty
_DeleteValue
_Find
_HexToStr
_HexToStrUTF16LE
_KeyExists
_MoveKey
_MoveValue
_Open
_Read
_ReadExtra
_RestoreKey
_SaveKey
_StrToHex
_StrToHexUTF16LE
_Unload
_Write
_WriteExtra
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ