war_registerDriver
war_unRegisterDriver
Static task
static1
Behavioral task
behavioral1
Sample
b255072894acc2572b1f06d470472001c84ef873b4f4b05cacdc6c0fd3ed83c8.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b255072894acc2572b1f06d470472001c84ef873b4f4b05cacdc6c0fd3ed83c8.dll
Resource
win10v2004-20240802-en
Target
b255072894acc2572b1f06d470472001c84ef873b4f4b05cacdc6c0fd3ed83c8
Size
3.6MB
MD5
ad9e0172f44b4ba3e8439a6f5ceb7d19
SHA1
6fe5d940d1659f00f8a4e13486bb9ed1c9257496
SHA256
b255072894acc2572b1f06d470472001c84ef873b4f4b05cacdc6c0fd3ed83c8
SHA512
4ce0cf113a334091d43c53fc5edd939699773cddbd8b2fae6ef8286c30b6b7e3cd0ea84a211cf3b8059b6ee7bfcd3a203dad578d620fcc1763c99d15036228bb
SSDEEP
98304:5OMOiTKkHG/evzXSlKuon3hF7TnMFmAbh80Ng:5OMPBzXBuo3hFnMTbh87
Checks for missing Authenticode signature.
resource |
---|
b255072894acc2572b1f06d470472001c84ef873b4f4b05cacdc6c0fd3ed83c8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
war_registerDriver
war_unRegisterDriver
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ