FlashBuf
GetDumperDLLName
GetDumperDLLVersion
InstallDumperDLL
LastKeyStr
PauseLog
UninstallDumperDLL
Static task
static1
Behavioral task
behavioral1
Sample
8ed6c400e941609becf0b21bba6568b6c7f3529a5f299f1a64ae0b5d7bcab1a0.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8ed6c400e941609becf0b21bba6568b6c7f3529a5f299f1a64ae0b5d7bcab1a0.dll
Resource
win10v2004-20240802-en
Target
8ed6c400e941609becf0b21bba6568b6c7f3529a5f299f1a64ae0b5d7bcab1a0
Size
29KB
MD5
4fd114c1fc390ba738a15d4873f6d670
SHA1
d4f20ecc25f56e6b939b3278af92282750434f42
SHA256
8ed6c400e941609becf0b21bba6568b6c7f3529a5f299f1a64ae0b5d7bcab1a0
SHA512
e1fa31f47bf86a68892f9bad9634e47bf21c40cba6df868c8fa773676dacc807f9b3123c91c0d794a1f49c9c8fb8c4ee7b01a81f279eee795d36eee655c16018
SSDEEP
384:X+k0j/0nj+2RirPJYAPKt1AKzhzJFfxSYKfbL72HlPxko2xz7fO2/fcp1HPR/3rA:X+/jMSE2YOXEP2zTXcp5PRvr9cq74
Checks for missing Authenticode signature.
resource |
---|
8ed6c400e941609becf0b21bba6568b6c7f3529a5f299f1a64ae0b5d7bcab1a0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
FlashBuf
GetDumperDLLName
GetDumperDLLVersion
InstallDumperDLL
LastKeyStr
PauseLog
UninstallDumperDLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ