war_registerDriver
war_unRegisterDriver
Static task
static1
Behavioral task
behavioral1
Sample
bba212bd0cc7bbde3e0da1ff3b8bef8b6e5f7ac038b624bf34a874e0116c7849.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bba212bd0cc7bbde3e0da1ff3b8bef8b6e5f7ac038b624bf34a874e0116c7849.dll
Resource
win10v2004-20240802-en
Target
bba212bd0cc7bbde3e0da1ff3b8bef8b6e5f7ac038b624bf34a874e0116c7849
Size
3.6MB
MD5
52516458a5f639c744f712041b77dfa6
SHA1
0c9dbca0e37f2f424f4b9b4dbeb772ca5792d962
SHA256
bba212bd0cc7bbde3e0da1ff3b8bef8b6e5f7ac038b624bf34a874e0116c7849
SHA512
098afe085da0ab3fc459cec909ccc8a14901b5dbd5b7a7cff7fcee092611bfd4fe11a2b831b76748ae9b2fe2a84b08b51cee908def0e4a4a430f9ee4339a9d1d
SSDEEP
98304:5OMOiTKkHG/evzXSlKuon3hF7TnMFmAbh80N0:5OMPBzXBuo3hFnMTbh8H
Checks for missing Authenticode signature.
resource |
---|
bba212bd0cc7bbde3e0da1ff3b8bef8b6e5f7ac038b624bf34a874e0116c7849 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
war_registerDriver
war_unRegisterDriver
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ