ClassEvent
Hot
Increase
Whole
class
close
explore
Static task
static1
Behavioral task
behavioral1
Sample
a76762b3eb1e1e0bf9db4a46927611fd2ef7ea62a817c11dcd1e822c9b80893b.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a76762b3eb1e1e0bf9db4a46927611fd2ef7ea62a817c11dcd1e822c9b80893b.dll
Resource
win10v2004-20240802-en
Target
a76762b3eb1e1e0bf9db4a46927611fd2ef7ea62a817c11dcd1e822c9b80893b
Size
128KB
MD5
d253291d5b765c9d42ad6fb551a87993
SHA1
5d9f33cd28858679cf67d2b40a99375a1c5835ab
SHA256
a76762b3eb1e1e0bf9db4a46927611fd2ef7ea62a817c11dcd1e822c9b80893b
SHA512
30c18faccc0580d82371da49f72f84b9208631cc06659ea373d8955655cd861b21011efaba3bc7fd749e5d97f742aa8d8e79991763ce250b70ed5fb92bde1c4a
SSDEEP
1536:+KAj02kbRJeYBuMozTEVxjkd6EE7S9a3oW7+iXSixcS1qIJiubbv4OJY12m0zU:+KeQozTE/jklE7ciXcIJiub74OXU
Checks for missing Authenticode signature.
resource |
---|
a76762b3eb1e1e0bf9db4a46927611fd2ef7ea62a817c11dcd1e822c9b80893b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
VirtualQuery
GetModuleFileNameA
IsDebuggerPresent
LocalAlloc
LocalFree
MultiByteToWideChar
IsBadReadPtr
IsBadCodePtr
lstrlenW
WideCharToMultiByte
CreateWaitableTimerA
SetWaitableTimer
CloseHandle
GetCurrentProcess
OpenProcess
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
GetUserDefaultLCID
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
PeekMessageA
GetMessageA
wsprintfA
MessageBoxA
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
CoInitialize
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
OleRun
CLSIDFromString
CLSIDFromProgID
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetCredentials
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSetTimeouts
WinHttpOpen
WinHttpCrackUrl
WinHttpCheckPlatform
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpReadData
WinHttpQueryHeaders
VarR8FromCy
VariantInit
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
VarR8FromBool
VariantChangeType
SysFreeString
SafeArrayDestroy
VariantClear
SysAllocString
SafeArrayCreate
VariantCopy
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
__CxxFrameHandler
strncmp
memmove
modf
realloc
_CIfmod
_ftol
atoi
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
malloc
free
_stricmp
ClassEvent
Hot
Increase
Whole
class
close
explore
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ