war_registerDriver
war_unRegisterDriver
Static task
static1
Behavioral task
behavioral1
Sample
2035f22c7745e20e5681979f2a1f03246d307a4f167deab937e00175f3872c9e.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2035f22c7745e20e5681979f2a1f03246d307a4f167deab937e00175f3872c9e.dll
Resource
win10v2004-20240802-en
Target
2035f22c7745e20e5681979f2a1f03246d307a4f167deab937e00175f3872c9e
Size
134KB
MD5
83ec774d32bf3f643a82a38242589b64
SHA1
58b92e2e33b5ef4ff50c382dff78a4b1ba93dea5
SHA256
2035f22c7745e20e5681979f2a1f03246d307a4f167deab937e00175f3872c9e
SHA512
d6e95ec023d3d88f819328dcd18a92c401f95f2f4bfc16df2238f5abae10c14b1c7a9a730f6b09e78280e964e431210eac550e9f1df4ea8b677a57a65dd5e1ee
SSDEEP
3072:u19XmCegJi9gYKm0GKQ+SVxA1D2ogx++i5:uHPegJi9gYTwQjxAEo
Checks for missing Authenticode signature.
resource |
---|
2035f22c7745e20e5681979f2a1f03246d307a4f167deab937e00175f3872c9e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
WriteProcessMemory
FindFirstFileA
GetCurrentProcess
GetFullPathNameA
GetLastError
CreateFileA
DisableThreadLibraryCalls
CloseHandle
FreeConsole
K32GetModuleInformation
GetProcAddress
GetFileSize
GetModuleHandleW
FreeLibrary
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CreateFileW
war_registerDriver
war_unRegisterDriver
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ