AddIn_FileTime
AddIn_SystemTime
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fef84522fcf32c833805474e64539d56eb3ff998f6b37c837e14eced66016959.dll
Resource
win7-20240903-en
Target
fef84522fcf32c833805474e64539d56eb3ff998f6b37c837e14eced66016959
Size
356KB
MD5
82ca121350d32345de75bdff1533d237
SHA1
1619bdfba1a3396a588aac0884c2fdfbc0df9377
SHA256
fef84522fcf32c833805474e64539d56eb3ff998f6b37c837e14eced66016959
SHA512
b5fe1599777443483cb253e9baeebc8efb918db01a84d279b1ae250a9bd71f03b2f28065fb555d82ccd3f443e454f06211b2d0d831949e9d061382ef8269f77e
SSDEEP
3072:JI0AM0yQkR9M6lglELtJUNjiWGyWcTr0JUiA2tqZ4IvUlDAj7UOjVifSwHEDQVLK:i5MR9M6y3TmRIvgMSS3AyUrhYu3j
Checks for missing Authenticode signature.
Processes:
| resource |
|---|
| fef84522fcf32c833805474e64539d56eb3ff998f6b37c837e14eced66016959 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetTimeFormatA
GetDateFormatA
GetThreadLocale
FileTimeToSystemTime
VirtualAlloc
ExitProcess
CloseHandle
CreateFileW
SetStdHandle
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EncodePointer
FlsGetValue
FlsAlloc
FlsFree
SetLastError
GetLastError
HeapSize
HeapValidate
IsBadReadPtr
DecodePointer
GetProcAddress
GetModuleHandleW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapAlloc
GetModuleFileNameW
HeapReAlloc
HeapQueryInformation
HeapFree
WriteFile
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
RaiseException
RtlPcToFileHeader
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
MessageBoxA
CoTaskMemFree
CoTaskMemAlloc
CoLoadLibrary
AddIn_FileTime
AddIn_SystemTime
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ