??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@$$QAV01@@Z
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@ABV01@@Z
?__autoclassinit2@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAEXI@Z
?__autoclassinit2@RCSQLiteRecordSet@RC@@QAEXI@Z
Static task
static1
Behavioral task
behavioral1
Sample
b6dcc94440881d95a67582118e3a26414901cb25136a33fd22392575ea4acbcd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b6dcc94440881d95a67582118e3a26414901cb25136a33fd22392575ea4acbcd.exe
Resource
win10v2004-20230220-en
Target
b6dcc94440881d95a67582118e3a26414901cb25136a33fd22392575ea4acbcd
Size
1.2MB
MD5
092918dc0f61859ad6b0a6dba757c1c0
SHA1
95898ca595ebb7e5b3bce97e1a9617a9f08a84ec
SHA256
b6dcc94440881d95a67582118e3a26414901cb25136a33fd22392575ea4acbcd
SHA512
f5eca8b765ecac09083ca4296b37edcf32b5585dbb287fd7dcb54696c5d38146e415df16be50ccb042d216adedd99afcf1adbdfa8c0c49e2cc61dd865fb42845
SSDEEP
24576:v5wH2GZqy/HuxYKzN55uRW9u3am2BTf04Hl2r83AUNwL6lwmL:vqHbqy2eKzxoWs6BTM4HFVwowmL
Checks for missing Authenticode signature.
resource |
---|
b6dcc94440881d95a67582118e3a26414901cb25136a33fd22392575ea4acbcd |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?Start@RCSQLiteUpdateDMgr@RC@@SAXXZ
?Stop@RCSQLiteUpdateDMgr@RC@@SAXXZ
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
GdiplusShutdown
GdiplusStartup
ImmDisableIME
?Start@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAE?AVRCReturnValue@23@ABURCConfigCenterSetting@23@@Z
?Stop@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAE?AVRCReturnValue@23@XZ
?GetInstance@RCBasicBusinessConfigCenterDMgr@DM@RC@@SAAAV123@XZ
lstrlenW
GetFullPathNameW
GetFileTime
GetFileSize
SetEndOfFile
SetFileTime
ReadFile
HeapAlloc
FindClose
FindNextFileW
lstrcmpiW
FindResourceW
LoadResource
GetSystemInfo
LockResource
GetVersionExW
ResetEvent
SetEvent
CreateEventW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
GetDiskFreeSpaceW
GetVolumeInformationW
GetTempPathW
HeapFree
LoadLibraryW
LoadLibraryA
GetFileAttributesW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
ReleaseMutex
WideCharToMultiByte
SetFileAttributesW
GetACP
GetFileAttributesExW
GetLongPathNameW
FindFirstFileW
CreateProcessW
LocalFree
WaitForSingleObject
WaitForMultipleObjects
ExpandEnvironmentStringsW
OpenProcess
GetCurrentProcess
GetDriveTypeW
LoadLibraryExW
DeleteFileW
GetCurrentDirectoryW
GetWindowsDirectoryW
CreateDirectoryW
GetFileSizeEx
InterlockedExchangeAdd
GetTickCount
InitializeCriticalSectionAndSpinCount
ResumeThread
FormatMessageW
DeviceIoControl
InterlockedExchange
InterlockedIncrement
GetProcessHeap
VirtualQuery
GetLogicalDriveStringsW
GetEnvironmentVariableW
QueryDosDeviceW
GetUserDefaultLangID
GetCurrentProcessId
GetLocalTime
GetCurrentThreadId
CreateFileW
SetFilePointer
GetModuleFileNameW
WriteFile
CloseHandle
GetLastError
CreateMutexW
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
FileTimeToSystemTime
InterlockedDecrement
FreeLibrary
SetLastError
GlobalMemoryStatusEx
GetModuleHandleExW
OutputDebugStringW
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
VirtualQueryEx
CreateSemaphoreW
CreateThread
TerminateThread
GetProcessId
ReleaseSemaphore
RtlCaptureContext
lstrcmpW
CreateEventA
LocalAlloc
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
SetThreadPriority
GetExitCodeThread
TlsAlloc
TlsSetValue
GetTimeZoneInformation
TlsFree
wsprintfW
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
_Cnd_destroy_in_situ
_Cnd_broadcast
_Mtx_unlock
_Xtime_get_ticks
_Query_perf_counter
_Cnd_wait
_Cnd_register_at_thread_exit
_Mtx_init_in_situ
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
_Mtx_lock
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_destroy_in_situ
?__ExceptionPtrToBool@@YA_NPBX@Z
_Cnd_timedwait
?_Syserror_map@std@@YAPBDH@Z
?_XGetLastError@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_C_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
_Query_perf_frequency
?__ExceptionPtrCopy@@YAXPAXPBX@Z
_Cnd_init_in_situ
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_unregister_at_thread_exit
_Mtx_current_owns
??0task_continuation_context@Concurrency@@AAE@XZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
_Cnd_signal
?classic@locale@std@@SAABV12@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
PathFileExistsW
__std_exception_copy
_purecall
__std_exception_destroy
__CxxFrameHandler3
wcsrchr
__std_type_info_name
__std_terminate
wcschr
wcsstr
strstr
_except_handler4_common
_CxxThrowException
memset
memcpy
__std_type_info_compare
memmove
memchr
__RTtypeid
_set_purecall_handler
__RTDynamicCast
strchr
_initialize_wide_environment
_configure_wide_argv
_initterm
_set_app_type
_seh_filter_exe
_cexit
_get_wide_winmain_command_line
terminate
_invalid_parameter_noinfo_noreturn
_initterm_e
exit
_set_invalid_parameter_handler
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_controlfp_s
_exit
_beginthreadex
_c_exit
strerror_s
_register_thread_local_exe_atexit_callback
_errno
_invalid_parameter_noinfo
_mktime64
_time64
_localtime64
wcstoul
_itow_s
atoi
_wtoi
malloc
calloc
_set_new_mode
_callnewh
free
realloc
fclose
ftell
fseek
rewind
fwrite
fread
__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vfprintf
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s
_wfopen_s
_set_fmode
__p__commode
__acrt_iob_func
__stdio_common_vswscanf
_wcsnicmp
towupper
isspace
towlower
wcscpy_s
wcsncpy
_stricmp
tolower
_wcsicmp
srand
rand
_splitpath_s
_isnan
_except1
ceil
floor
_finite
_dtest
__setusermatherr
_configthreadlocale
OpenServiceW
QueryServiceConfig2W
QueryServiceConfigW
EnumServicesStatusExW
StartServiceW
QueryServiceStatusEx
CreateServiceW
CloseServiceHandle
OpenSCManagerW
DeleteService
ControlService
SHGetFolderPathW
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@$$QAV01@@Z
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@ABV01@@Z
?__autoclassinit2@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAEXI@Z
?__autoclassinit2@RCSQLiteRecordSet@RC@@QAEXI@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ