WEINTEK_DRV_GetAttribute
WEINTEK_DRV_GetDeviceTableEx
WEINTEK_DRV_InitEx
WEINTEK_DRV_InputFilter
WEINTEK_DRV_OutputFilter
Static task
static1
Behavioral task
behavioral1
Sample
3fa985063ed5dee6689fa5b37c5bb5f5204d167339458b01089491eeef92dbcb.dll
Resource
win7-20241010-en
Target
3fa985063ed5dee6689fa5b37c5bb5f5204d167339458b01089491eeef92dbcb
Size
108KB
MD5
c4c723cdef0e23a679e050a30c9c66c6
SHA1
78ba280109438846e06f06fa24545c5d442c9e16
SHA256
3fa985063ed5dee6689fa5b37c5bb5f5204d167339458b01089491eeef92dbcb
SHA512
dfd37c0e7758fcb19b19f63ba6c72dcfaeb4c76573f13765e7b69584282af315ffe972cd34005bea1b36a6f490ba4f1eb4c11acec7542760ebdaf3121348728f
SSDEEP
3072:ghuqQtBDm5rxheZ8rU3iGcVb1cqFim2voQ:gtQ8Xe+rUDdqF6vh
Checks for missing Authenticode signature.
resource |
---|
3fa985063ed5dee6689fa5b37c5bb5f5204d167339458b01089491eeef92dbcb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
WEINTEK_DRV_GetAttribute
WEINTEK_DRV_GetDeviceTableEx
WEINTEK_DRV_InitEx
WEINTEK_DRV_InputFilter
WEINTEK_DRV_OutputFilter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE