GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Static task
static1
Behavioral task
behavioral1
Sample
562597b775c99aaf02c9e8f5adfdcc62b2cb249b4fbb06e4e128a0bd5daa3899.dll
Resource
win7-20240903-en
Target
562597b775c99aaf02c9e8f5adfdcc62b2cb249b4fbb06e4e128a0bd5daa3899
Size
1.0MB
MD5
b91aabe150abd91e053c9596385f79ec
SHA1
469c4b1e8e46942a92282d467988536e81147244
SHA256
562597b775c99aaf02c9e8f5adfdcc62b2cb249b4fbb06e4e128a0bd5daa3899
SHA512
8b3ac36dcaaef1143956b82a5a5f472cef0e42baa35a3be6895a47631fc5d1f74a1d6932716d0bfb200e96d1560d48cca6965041b4dd6e4e78d4bfc7644f4e8e
SSDEEP
12288:Qmzy52sk14W7fnumkiipuuDx6h0QrH6sUgEN6GGvulmcLMkhMRGM4h/qofG:Vsk14W7dP7H6sxEMrYMRGJ/qofG
Checks for missing Authenticode signature.
Processes:
| resource |
|---|
| 562597b775c99aaf02c9e8f5adfdcc62b2cb249b4fbb06e4e128a0bd5daa3899 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileW
FindFirstFileW
FindNextFileW
GetDriveTypeW
SetFilePointer
WriteFile
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
OpenEventA
Sleep
CreateProcessW
GetModuleFileNameW
lstrcpyW
lstrcatW
lstrlenW
CreateDirectoryW
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
GetLastError
CopyFileW
MoveFileExW
GetCurrentProcessId
lstrcmpiW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetModuleFileNameA
lstrcatA
lstrlenA
MoveFileW
GetCommandLineW
lstrcmpW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
SetStdHandle
HeapQueryInformation
HeapSize
HeapReAlloc
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
GetCurrentThreadId
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
EncodePointer
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
DeleteFileW
ReadFile
HeapValidate
GetSystemInfo
GetCurrentThread
GetStdHandle
GetFileType
OutputDebugStringW
WriteConsoleW
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleCP
GetFileSizeEx
FindClose
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
DecodePointer
wsprintfW
CommandLineToArgvW
StrStrW
PathFileExistsW
StrStrIW
SHSetValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ