DpxCheckJobExists
DpxCheckJobExistsEx
DpxDeleteJob
DpxDeleteJobEx
DpxFreeMemory
DpxNewJob
DpxNewJobEx
DpxRestoreJob
DpxRestoreJobEx
DpxRestoreOrNewJob
DpxRestoreOrNewJobEx
Static task
static1
Behavioral task
behavioral1
Sample
4ac846154d1f91c30a373dc364d880d7f36b0d1f23edbf8e854b38b804db7549.dll
Resource
win7-20240903-en
Target
4ac846154d1f91c30a373dc364d880d7f36b0d1f23edbf8e854b38b804db7549
Size
700KB
MD5
bfbcb9e4b4723629dda33d1406a87d3a
SHA1
d342007297faf30e3cd1a703b31287e735470858
SHA256
4ac846154d1f91c30a373dc364d880d7f36b0d1f23edbf8e854b38b804db7549
SHA512
d0679c2dead14ccc998bf6ae31c79e3e4570a345401374a099e2feb3252eb1a2a2159b559a0963523f39e4080d6ecf672d2c397c12cdce7d1a142c7eb81afd41
SSDEEP
12288:dEwgKnIhABTW0HcD5a1PKxdZhC+k+V9Hgeb/tf/B9P632vHAA:dEwXnOAx5HcDM1Sxd3ChCHg2/P9yGo
Checks for missing Authenticode signature.
Processes:
resource |
---|
4ac846154d1f91c30a373dc364d880d7f36b0d1f23edbf8e854b38b804db7549 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ldiv
SetWindowExtEx
CreateDiscardableBitmap
DeleteColorSpace
GetRegionData
CreateMetaFileW
CopyEnhMetaFileW
VarDateFromCy
VarR8FromDec
RpcBindingSetAuthInfoExA
UuidIsNil
NdrUserMarshalUnmarshall
HICON_UserMarshal
NetShareGetInfo
GetUrlCacheEntryInfoW
AssociateColorProfileWithDeviceW
CryptCATPutAttrInfo
GetLastError
GetNLSVersion
FindActCtxSectionStringW
EnumTimeFormatsA
UnregisterWaitEx
CloseHandle
SetEvent
StrTrimW
UrlUnescapeA
MprAdminInterfaceTransportAdd
SetupDiSetSelectedDriverA
SetupLogErrorA
DpxCheckJobExists
DpxCheckJobExistsEx
DpxDeleteJob
DpxDeleteJobEx
DpxFreeMemory
DpxNewJob
DpxNewJobEx
DpxRestoreJob
DpxRestoreJobEx
DpxRestoreOrNewJob
DpxRestoreOrNewJobEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ