DllRegisterServer
DllUnregisterServer
Drypose
Jumpforest
Static task
static1
Behavioral task
behavioral1
Sample
799865b39bb94b57c11e2f54cab257ca7d66551a7ac8fbe6195f57d5a91dd977.dll
Resource
win7-20240903-en
Target
799865b39bb94b57c11e2f54cab257ca7d66551a7ac8fbe6195f57d5a91dd977.exe
Size
1.3MB
MD5
998a0fb3ee130b8e1ecd29fdfae0f238
SHA1
faf59274ef7c2a23a0f30b5554aa8c09e1232a44
SHA256
799865b39bb94b57c11e2f54cab257ca7d66551a7ac8fbe6195f57d5a91dd977
SHA512
316e55479b6dcf7f5704c7c8ba2c100ecb71396e86c1de6c474962ac5fbffad7a41523cf1d27e99033b3bc58d000bae3bf98a5d1fbddf2bccea28e135788aa65
SSDEEP
24576:pbX7jHgZPGXo6M+QhlE5gp980MZAVsBgTlB47lH32Wq2tdMKeB1gSggIw0:pPbgZPGX/M+GCm8vrB5ZZYBIP
Checks for missing Authenticode signature.
resource |
---|
799865b39bb94b57c11e2f54cab257ca7d66551a7ac8fbe6195f57d5a91dd977.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetSystemPowerState
GetCommandLineA
GetLocalTime
CreateFileA
Sleep
GetCurrentThreadId
FreeLibrary
LoadLibraryA
GetProcAddress
VirtualProtectEx
GetModuleFileNameA
LocalAlloc
GetProcessHeap
LCMapStringW
LCMapStringA
SetEndOfFile
GetStringTypeW
GetStringTypeA
LocalFree
FlushFileBuffers
CreateMutexA
OpenMutexA
DeleteFileA
ResetEvent
FindFirstChangeNotificationA
GetEnvironmentVariableA
PeekNamedPipe
DuplicateHandle
HeapAlloc
GetCurrentThread
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
HeapFree
RtlUnwind
GetVersion
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetLastError
WriteFile
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
SetUnhandledExceptionFilter
GetCPInfo
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
ReadFile
GetIconInfo
SetWindowTextA
IsDialogMessageA
LoadBitmapA
CheckDlgButton
SendMessageTimeoutA
OleUninitialize
OleInitialize
GetSaveFileNameA
CommDlgExtendedError
ChooseFontA
GetFileTitleA
ReplaceTextA
GetOpenFileNameA
ImageList_DragEnter
ImageList_DragMove
ImageList_Draw
ImageList_ReplaceIcon
DllRegisterServer
DllUnregisterServer
Drypose
Jumpforest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ