IternalJob
QuerySettings
Static task
static1
Behavioral task
behavioral1
Sample
c917a6d3c9f34d074ccd6f031ad1891315bd67e54115f866fc64149a4f5fcd9b.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
c917a6d3c9f34d074ccd6f031ad1891315bd67e54115f866fc64149a4f5fcd9b.dll
Resource
win10v2004-20250313-en
Target
c917a6d3c9f34d074ccd6f031ad1891315bd67e54115f866fc64149a4f5fcd9b
Size
2.1MB
MD5
8668e7b3c6f2bb061784d78c7351b335
SHA1
c42226ab0c098d0c86254f9861faea74359d8f1a
SHA256
c917a6d3c9f34d074ccd6f031ad1891315bd67e54115f866fc64149a4f5fcd9b
SHA512
81562a5ec3e7afb0c5efa5020f8b350250dd1fd7a16ce23fe3de3a6622d4cde24b85e726523a499969015f215d372dbbafc59fe53aecca5ea114a3c3a4294186
SSDEEP
49152:9pfaMa7wkHW4GnVibdZAi6WcJQc2CU/Z9dYn0XZW1M:T4KVIZAiTcqcHkdEII1M
Checks for missing Authenticode signature.
resource |
---|
c917a6d3c9f34d074ccd6f031ad1891315bd67e54115f866fc64149a4f5fcd9b |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetEnvironmentStringsA
GetProcessVersion
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
RtlCaptureContext
VirtualProtect
GetModuleFileNameA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
LoadLibraryW
ReplacePartitionUnit
OpenSemaphoreW
SetCalendarInfoA
HeapSummary
GetCurrentThreadId
GetCompressedFileSizeTransactedW
CharToOemBuffW
SetMessageExtraInfo
CreateDesktopExA
LookupIconIdFromDirectory
DefFrameProcA
GetLastInputInfo
SetWindowDisplayAffinity
ShowScrollBar
GetCurrentObject
CloseFigure
GdiPlayDCScript
GetTextExtentPointW
CreateBitmapIndirect
SHBindToFolderIDListParent
ShellExecuteEx
SHGetFolderPathA
SHGetMalloc
SHGetUnreadMailCountW
CoSetProxyBlanket
HMENU_UserUnmarshal
CoUnmarshalInterface
HBITMAP_UserUnmarshal
CoBuildVersion
CLIPFORMAT_UserSize
IternalJob
QuerySettings
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ