Function1
Function2
Function3
Function4
Static task
static1
Behavioral task
behavioral1
Sample
c764e50926982893bd08148b2a028cca453b4cd84271a1d216895ffcded32298.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c764e50926982893bd08148b2a028cca453b4cd84271a1d216895ffcded32298.dll
Resource
win10v2004-20230220-en
Target
c764e50926982893bd08148b2a028cca453b4cd84271a1d216895ffcded32298
Size
220KB
MD5
2215659561cc3c514652f09c407bc672
SHA1
aa5be9a90af57faa79593bd6981c22bb0f3d84d9
SHA256
c764e50926982893bd08148b2a028cca453b4cd84271a1d216895ffcded32298
SHA512
c96dff3662987a4ee648a89ddb2cc5a64b5184ee4fc2153f68d7cb9216a0f2476d6b12722d7d360ae35265fb140789c3442d3cee5f648abf53b4b975207d0f4a
SSDEEP
6144:tIIIIpzEtV8k+diK2+cEyecpAOGwvjEC5:Lc8k+8KpfyFpMw7EC5
Checks for missing Authenticode signature.
resource |
---|
c764e50926982893bd08148b2a028cca453b4cd84271a1d216895ffcded32298 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PathFileExistsW
StrStrIW
GetLastError
CloseHandle
CreateFileW
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
ResumeThread
QueueUserAPC
Sleep
WriteFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
WinExec
GetTickCount
GetModuleFileNameW
CreateProcessW
GetCommandLineW
CopyFileW
GetCurrentThreadId
GetLocalTime
GetProcAddress
GetModuleHandleW
GetEnvironmentVariableW
HeapFree
HeapAlloc
GetProcessHeap
FindFirstFileW
GetFileAttributesExW
GetACP
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateMutexW
WaitForSingleObject
ReleaseMutex
LoadLibraryW
FreeLibrary
LoadLibraryExW
ReadFile
GetFileSize
CreateDirectoryW
GetFullPathNameW
lstrlenW
GetFileAttributesW
FindClose
InterlockedExchangeAdd
LocalFree
HeapSize
WriteConsoleW
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
SHGetSpecialFolderPathW
CommandLineToArgvW
Function1
Function2
Function3
Function4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ