GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Static task
static1
Behavioral task
behavioral1
Sample
version.dll
Resource
win7-20240903-en
Target
version.dll
Size
1.0MB
MD5
4b7ea4719e10a326a3a83233ecd952dd
SHA1
18ac98c6780f2740b3462b2232f7de734a933682
SHA256
a37db4499f839088a50d0d88bb5af644462202c8ea4581ca7750ed502e1b1e0d
SHA512
31cefbb4e1d77bfb9cc25346bfde1c0d2dd38d0b529fb0a633789e964258bab14da84d7c06ab53a7063fd05bb34637db181598880c72fa372400b828f59903ef
SSDEEP
12288:Qxzy52sk14W7fncGkiipuuDx6h0QrH6s6iEN6GGvulmc3MkpBjvrEH72M:esk14W7pP7H6s6iEMrkrEH72M
Checks for missing Authenticode signature.
| resource |
|---|
| version.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileW
FindFirstFileW
FindNextFileW
GetDriveTypeW
SetFilePointer
WriteFile
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
OpenEventA
Sleep
CreateProcessW
GetModuleFileNameW
lstrcpyW
lstrcatW
lstrlenW
CreateDirectoryW
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
GetLastError
CopyFileW
MoveFileExW
GetCurrentProcessId
lstrcmpiW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetModuleFileNameA
lstrcatA
lstrlenA
MoveFileW
GetCommandLineW
lstrcmpW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
SetStdHandle
HeapQueryInformation
HeapSize
HeapReAlloc
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
GetCurrentThreadId
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
EncodePointer
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
DeleteFileW
ReadFile
HeapValidate
GetSystemInfo
GetCurrentThread
GetStdHandle
GetFileType
OutputDebugStringW
WriteConsoleW
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleCP
GetFileSizeEx
FindClose
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
DecodePointer
wsprintfW
CommandLineToArgvW
StrStrW
PathFileExistsW
StrStrIW
SHSetValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ