IternalJob
QuerySettings
Static task
static1
Behavioral task
behavioral1
Sample
abaf649e6440033ea250691e6bff02c8924a5f9b827168f576606835d7a820a0.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
abaf649e6440033ea250691e6bff02c8924a5f9b827168f576606835d7a820a0.dll
Resource
win10v2004-20250314-en
Target
abaf649e6440033ea250691e6bff02c8924a5f9b827168f576606835d7a820a0
Size
2.1MB
MD5
5758813f20b1b3f041b20f700e61ca2c
SHA1
5cf76172c4b3c33f2f64536ebdf7d6a5935350d0
SHA256
abaf649e6440033ea250691e6bff02c8924a5f9b827168f576606835d7a820a0
SHA512
69b1955969eb7f7712698360ce85baad22fa90c3ca3b58fdaeb1637f7119639aecb9eb215e35c55aa0a2c375601a54633fc3b26badcc24b350251307130870d9
SSDEEP
49152:tbhl087l5fJeS/DrSoUtP9qqyD8e3+DSP9yJoZS:tLTfJtylPyD8e5MJoZS
Checks for missing Authenticode signature.
resource |
---|
abaf649e6440033ea250691e6bff02c8924a5f9b827168f576606835d7a820a0 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetEnvironmentStringsA
GetProcessVersion
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
RtlCaptureContext
VirtualProtect
GetModuleFileNameA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
LoadLibraryW
ReplacePartitionUnit
OpenSemaphoreW
SetCalendarInfoA
HeapSummary
GetCurrentThreadId
GetCompressedFileSizeTransactedW
CharToOemBuffW
SetMessageExtraInfo
CreateDesktopExA
LookupIconIdFromDirectory
DefFrameProcA
GetLastInputInfo
SetWindowDisplayAffinity
ShowScrollBar
GetCurrentObject
CloseFigure
GdiPlayDCScript
GetTextExtentPointW
CreateBitmapIndirect
SHBindToFolderIDListParent
ShellExecuteEx
SHGetFolderPathA
SHGetMalloc
SHGetUnreadMailCountW
CoSetProxyBlanket
HMENU_UserUnmarshal
CoUnmarshalInterface
HBITMAP_UserUnmarshal
CoBuildVersion
CLIPFORMAT_UserSize
IternalJob
QuerySettings
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ