war_registerDriver
war_unRegisterDriver
Static task
static1
Behavioral task
behavioral1
Sample
e7d9bb531619b4116196d63f591fb9eb1e52b40ef96c76b76d6032197473a0a7.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e7d9bb531619b4116196d63f591fb9eb1e52b40ef96c76b76d6032197473a0a7.dll
Resource
win10v2004-20240802-en
Target
e7d9bb531619b4116196d63f591fb9eb1e52b40ef96c76b76d6032197473a0a7
Size
3.6MB
MD5
eb016ba9429cc1d79d42cafb62661d9a
SHA1
385470e34c0e187babddd47589f289878576e559
SHA256
e7d9bb531619b4116196d63f591fb9eb1e52b40ef96c76b76d6032197473a0a7
SHA512
00e18861104e35ece8f803a2fd1239d215aefb9c575d99ac16c097b521790228d22790097b9cc9275b12630a88dd12894b861ab8e3c39fc28f81c3bb87ef169f
SSDEEP
98304:5OMOiTKkHG/evzXSlKuon3hF7TnMFmAbh80Nd:5OMPBzXBuo3hFnMTbh8i
Checks for missing Authenticode signature.
resource |
---|
e7d9bb531619b4116196d63f591fb9eb1e52b40ef96c76b76d6032197473a0a7 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
war_registerDriver
war_unRegisterDriver
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ