ABProviderInit
DllMain
HrAddFavs
MSProviderInit
NDBGetFileInfo
NSTServiceEntry
OSTServiceEntry
OTONNotifyNewMail
PSTCrashRecovery
PSTServiceEntry
PSTServiceEntry_Unicode
Static task
static1
Behavioral task
behavioral1
Sample
926548f7eae2029de9060ffa125122174fd591b499142d0251ea78551262999cN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
926548f7eae2029de9060ffa125122174fd591b499142d0251ea78551262999cN.dll
Resource
win10v2004-20240802-en
Target
926548f7eae2029de9060ffa125122174fd591b499142d0251ea78551262999cN.exe
Size
303KB
MD5
eb734e7679e9bcdb14560d1a78194a90
SHA1
60683e2bb2d5d482a3ac2f93f839d8c73e4cf5c2
SHA256
926548f7eae2029de9060ffa125122174fd591b499142d0251ea78551262999c
SHA512
33d360ff382c11820cbba23df8af5d1588f494f8d4bc9ff3d689a8b0c8156667de7a9987f88e2f85d32489a26f956657d17798b4a18a035b2f555c524b122957
SSDEEP
6144:ABbvEPwne5ugHFHypujkMtitKX+vGKjzfiVh06vGKjXG/NX4:ABbvEYnGug3gnvTjz6VhXvTjX8X4
Checks for missing Authenticode signature.
resource |
---|
926548f7eae2029de9060ffa125122174fd591b499142d0251ea78551262999cN.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHGetSettings
SHFormatDrive
SHFileOperationA
RpcSmAllocate
CoTaskMemFree
CoTaskMemAlloc
VerQueryValueW
CloseDesktop
CloseClipboard
GetMenuCheckMarkDimensions
CloseWindow
GetMonitorInfoA
GetSysColor
CloseWindowStation
GetDC
GetKeyboardLayout
CharNextA
GetKeyboardLayoutList
GetSystemMetrics
ReleaseDC
CharPrevA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetProcessTimes
GetShortPathNameA
GetStringTypeExW
GetSystemDefaultLCID
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempPathW
GetTickCount
GetTimeZoneInformation
DeleteFileW
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSize
HeapUnlock
InitializeCriticalSection
FreeLibrary
InterlockedExchange
IsDBCSLeadByte
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
SetFileAttributesW
SetLastError
SetLocalTime
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
DeleteCriticalSection
CreateSemaphoreA
CreateMutexA
CreateFileW
CreateDirectoryW
CloseHandle
FormatMessageW
FindFirstFileW
FindClose
ExpandEnvironmentStringsW
InterlockedCompareExchange
EnterCriticalSection
GetUserDefaultLCID
GetTraceLoggerHandle
AddAccessDeniedAce
GetTraceEnableLevel
GetTokenInformation
GetSecurityDescriptorDacl
GetLengthSid
FreeSid
CopySid
UnregisterTraceGuids
TraceEvent
SetSecurityDescriptorDacl
RegisterTraceGuidsA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
InitializeSecurityDescriptor
InitializeAcl
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidA
CheckTokenMembership
AllocateAndInitializeSid
AddAccessAllowedAce
StrChrA
PathFileExistsA
ChrCmpIA
StrCmpNA
DeleteObject
DeleteDC
CreateSolidBrush
CreateDCA
GetDeviceCaps
ord9
ABProviderInit
DllMain
HrAddFavs
MSProviderInit
NDBGetFileInfo
NSTServiceEntry
OSTServiceEntry
OTONNotifyNewMail
PSTCrashRecovery
PSTServiceEntry
PSTServiceEntry_Unicode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ