?InitializeChangeNotify@@YAHXZ
?PasswordChangeNotify@@YAJPEAU_UNICODE_STRING@@K0@Z
PasswordFilter
Static task
static1
Behavioral task
behavioral1
Sample
827366355c6429a7fe12d111e240c5bcec3ed61e717fb84ea8b771672dd1f88e.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
827366355c6429a7fe12d111e240c5bcec3ed61e717fb84ea8b771672dd1f88e.dll
Resource
win10v2004-20240709-en
Target
827366355c6429a7fe12d111e240c5bcec3ed61e717fb84ea8b771672dd1f88e.exe
Size
540KB
MD5
937d93cda7511ebc0fb4287d6904ae65
SHA1
0a94df6afb2ee38b8be97e8c8363ca49fb4d59b8
SHA256
827366355c6429a7fe12d111e240c5bcec3ed61e717fb84ea8b771672dd1f88e
SHA512
f86922a0f5ee1d706159f3e193bd56319c5a8fa65d97ea79ae3ca2b73fe0fabc5125864fad2915540a12aca1ccf450981a5215be9273e8ac7cf1090a0faa3e99
SSDEEP
12288:Q+9cwE53hheD1SLrfVFMGY1pWKt4xEHShTBdfG41KLoTDC:Q6KNdfG41KLP
Checks for missing Authenticode signature.
resource |
---|
827366355c6429a7fe12d111e240c5bcec3ed61e717fb84ea8b771672dd1f88e.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
WaitForSingleObject
GetFileAttributesW
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
CompareStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
CreateDirectoryW
DeleteFileW
CloseHandle
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
GetTimeZoneInformation
ReadFile
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
HeapSize
WriteConsoleW
SetEndOfFile
RtlUnwind
?InitializeChangeNotify@@YAHXZ
?PasswordChangeNotify@@YAJPEAU_UNICODE_STRING@@K0@Z
PasswordFilter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ