M0
M1
M10
M11
M12
M13
M14
M15
M2
M3
M4
M5
M6
M7
M8
M9
M_S0
M_S1
MaiDMFunc
MaiSfDummyEp
MmkeSureDirectoryPathExists
_MmmAssociateContext@8
Static task
static1
Behavioral task
behavioral1
Sample
296bcb00585e78546c6a54ead535db99f0c07fbeeece99029e05a7e15c34249fN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
296bcb00585e78546c6a54ead535db99f0c07fbeeece99029e05a7e15c34249fN.dll
Resource
win10v2004-20240802-en
Target
296bcb00585e78546c6a54ead535db99f0c07fbeeece99029e05a7e15c34249fN
Size
702KB
MD5
d5957ebae380eedccd44faa8436167b0
SHA1
88269ca61dc74c3ed4d6796aa111e995a9fcaee9
SHA256
296bcb00585e78546c6a54ead535db99f0c07fbeeece99029e05a7e15c34249f
SHA512
04310322e24dbd77f040683029ceaf304e5fe949d9a182a73f833ef34377adaa7df40042af9013f9d78530adef330d9a849307f3e89182945c29aae271ae2b73
SSDEEP
6144:NjAT5nl9P/9ZZJJiedIBlquXn5AEuxa6lDlehDlGHpOCYPa:qll9P/ZuedIeMn5DukMDDXR
Checks for missing Authenticode signature.
resource |
---|
296bcb00585e78546c6a54ead535db99f0c07fbeeece99029e05a7e15c34249fN |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
htonl
WriteProcessMemory
GetModuleFileNameW
GetProcAddress
LoadLibraryA
LoadLibraryW
K32EnumProcessModules
K32GetModuleFileNameExW
VirtualProtect
ExitProcess
CreateFileA
CreateFileW
CreateProcessW
GetModuleHandleW
IsDebuggerPresent
CloseHandle
SetUnhandledExceptionFilter
Sleep
GetCurrentProcessId
GetCurrentThreadId
OpenThread
GetThreadContext
SetThreadContext
VirtualAlloc
OpenFileMappingW
ReadProcessMemory
UnmapViewOfFile
GetModuleHandleA
SetProcessDEPPolicy
GetPrivateProfileStringW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateProcessA
ReadFile
ConnectNamedPipe
DisconnectNamedPipe
CreateNamedPipeA
GetTempPathW
WaitForSingleObject
CreatePipe
SetHandleInformation
RemoveDirectoryW
FindNextFileW
FindFirstFileW
FindClose
CreateDirectoryW
VirtualProtectEx
VirtualAllocEx
ResumeThread
SuspendThread
HeapCreate
InitializeCriticalSection
MoveFileExW
MapViewOfFile
GetLastError
SetFilePointer
SetEndOfFile
GetFileSize
GetFileAttributesW
IsProcessorFeaturePresent
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineA
HeapAlloc
RaiseException
HeapDestroy
HeapFree
UnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
CreateSemaphoreW
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
GetStdHandle
GetFileType
GetProcessHeap
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
SetStdHandle
SetFilePointerEx
WriteConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
OutputDebugStringW
GetStringTypeW
HeapSize
VirtualFree
CreateThread
DeleteFileW
RegisterClassExA
MessageBoxA
RegisterClassA
wsprintfW
MessageBoxW
LoadStringA
CreateWindowExA
EnumFontFamiliesExW
RegOpenKeyExW
RegOpenKeyExA
MakeSureDirectoryPathExists
ImmAssociateContext
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
M0
M1
M10
M11
M12
M13
M14
M15
M2
M3
M4
M5
M6
M7
M8
M9
M_S0
M_S1
MaiDMFunc
MaiSfDummyEp
MmkeSureDirectoryPathExists
_MmmAssociateContext@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ