NimMain
check
Static task
static1
Behavioral task
behavioral1
Sample
188f991458ff61bd46081b4aa8cfa549a6527f27ff771c646623573cc894f342.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
188f991458ff61bd46081b4aa8cfa549a6527f27ff771c646623573cc894f342.dll
Resource
win10v2004-20240802-en
Target
188f991458ff61bd46081b4aa8cfa549a6527f27ff771c646623573cc894f342
Size
305KB
MD5
a67d0d6cecc23281ad1764fd6070a145
SHA1
c9c44f6bf55001b3e28b1b8f5208b1e503622efc
SHA256
188f991458ff61bd46081b4aa8cfa549a6527f27ff771c646623573cc894f342
SHA512
94189fefb13979cd7601fc9b9dac86e0c558f6cb5a08c7dff95b7fe6eadc71c99fe35c6749f8cf904884991cf1fdc3c8cc190e9006b117c90e8b4db5b898c5bd
SSDEEP
6144:Pbo9DTDNii2TsJwHpjyQuUANtOTDcvgpTYOx6Kd3L:E9DQhgFqDQeTtx6K
Checks for missing Authenticode signature.
resource |
---|
188f991458ff61bd46081b4aa8cfa549a6527f27ff771c646623573cc894f342 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetProcAddress
GetProcessAffinityMask
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
__C_specific_handler
__doserrno
__iob_func
__pioinfo
_amsg_exit
_beginthreadex
_endthreadex
_errno
_filelengthi64
_fileno
_initterm
_localtime64
_lock
_lseeki64
_setjmp
_setmode
_strdup
_ultoa
_unlock
_vsnprintf
_wfopen
_wgetenv
_write
abort
calloc
clearerr
exit
fclose
ferror
fflush
fgetc
fgetpos
fprintf
fputc
fread
free
fsetpos
fwrite
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
realloc
setvbuf
signal
strcmp
strerror
strlen
strncmp
ungetc
vfprintf
NimMain
check
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ