AllocInstanceData
Compress
CompressBegin
CompressEnd
CompressFramesInfo
DllMain
FreeInstanceData
SetScalability
Static task
static1
Behavioral task
behavioral1
Sample
64e62ffeb22a2906fcdfdc99988f7f18729aa0ab8709a20180e709c824cf6ae8.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64e62ffeb22a2906fcdfdc99988f7f18729aa0ab8709a20180e709c824cf6ae8.dll
Resource
win10v2004-20240802-en
Target
64e62ffeb22a2906fcdfdc99988f7f18729aa0ab8709a20180e709c824cf6ae8
Size
470KB
MD5
223690a9167068dbe9aed0d669790161
SHA1
a79e0ce8e1fbcf02c6d0c470189cac7ed6ccb8d3
SHA256
64e62ffeb22a2906fcdfdc99988f7f18729aa0ab8709a20180e709c824cf6ae8
SHA512
30943d3be8ab74588026f3da77e6318f8a0f826a51804cbcdc75c75478a129feb5d0a5512338217ace57d798867d3875ee868216537124139ce506f284fbad8b
SSDEEP
3072:m40GK1sg2ju1eTIIIsVqy9gOQRbSos6B0n5YCmo+Xihp0VTIeXBJLWcng4g:s4TIIIsRyhFIuihp0XLJg
Checks for missing Authenticode signature.
resource |
---|
64e62ffeb22a2906fcdfdc99988f7f18729aa0ab8709a20180e709c824cf6ae8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStdHandle
LocalFree
GlobalAlloc
GlobalFree
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
LocalAlloc
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
LoadLibraryA
AllocInstanceData
Compress
CompressBegin
CompressEnd
CompressFramesInfo
DllMain
FreeInstanceData
SetScalability
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ