SteadingTheraputant.ectocinerea.dll
- IMPHASH aa6732aad80627bf3fc823b2fbac9d4e
- SHA256 e3a8780ae84c5fd62814de8ae46f05ba28786f8ec8fc665dec190409f89f4e70
- MD5 a310b3fec2132cf730abc633826e6ff0
- SHA1 968ef84c96a81e224b8ee5deb760063340429631
- SHA512 53c0f566cd29af629e2ee5220e52489944151040be5b58131a98c8f5263f727665a4a90fcd6d795416b3fd3f591a6c6113877b37ebbb6bd9ecba3fd604e176c4
- SSDEEP 6144:SsUG4yxNqItF5W9XncaWDAdjaTNc8Qs3Az0tDCFHyHQT3JkYVU0ZIf2Bqp:Ssd4VItpkdjSe0AFHyw+0ZHq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
Major OS version
Entry point
108781
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
Sleep
LockFile
LockFileEx
UnlockFile
UnlockFileEx
GetOverlappedResult
CancelIo
WaitForSingleObject
DeviceIoControl
SetStdHandle
SetFilePointer
CreateFileW
DeleteFileW
MoveFileExW
CreateHardLinkW
GetStdHandle
CreatePipe
CreateFileA
CreateNamedPipeA
CreateEventA
ReadFile
PeekNamedPipe
WriteFile
FlushFileBuffers
SetEndOfFile
CreateMutexW
OpenMutexW
ReleaseMutex
DeleteCriticalSection
InitializeCriticalSection
CreateSemaphoreA
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
SetEvent
CreateMutexA
ResetEvent
GetACP
SetCurrentDirectoryW
GetThreadLocale
GetEnvironmentVariableW
SetEnvironmentVariableW
FormatMessageA
GetVersionExA
LoadLibraryA
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
TlsSetValue
TlsGetValue
TlsAlloc
GetExitCodeProcess
TlsFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
GlobalFree
GetCommandLineW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetSystemInfo
SetHandleInformation
GetCurrentThread
CreateFileMappingW
OpenFileMappingW
CreateProcessW
GetHandleInformation
WaitForMultipleObjects
OpenProcess
TerminateProcess
SwitchToThread
GetTimeZoneInformation
GetSystemTimeAsFileTime
FileTimeToSystemTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
ExpandEnvironmentStringsW
GetCurrentDirectoryW
GetDriveTypeW
GetDriveTypeA
GetFileAttributesExW
GetFullPathNameW
GetFileTime
SetFileTime
GetFileAttributesW
SetFileAttributesW
GetFileInformationByHandle
GetFileType
LocalFree
SetLastError
CloseHandle
GetCurrentProcess
DuplicateHandle
RemoveDirectoryW
CreateDirectoryW
FindFirstFileW
FindNextFileW
InterlockedExchangeAdd
FindClose
GetProcAddress
SetErrorMode
LoadLibraryExW
FreeLibrary
GetLastError
InterlockedCompareExchange
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoA
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
advapi32
LookupAccountNameA
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
GetTokenInformation
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
IsValidSid
EqualSid
LookupAccountSidA
ImpersonateLoggedOnUser
CreateProcessAsUserW
RevertToSelf
LogonUserW
DuplicateTokenEx
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueA
PrivilegeCheck
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetNamedSecurityInfoW
GetNamedSecurityInfoA
GetSecurityInfo
AllocateAndInitializeSid
GetEffectiveRightsFromAclW
FreeSid
ws2_32
gethostname
__WSAFDIsSet
getsockopt
htonl
ntohl
getservbyname
gethostbyaddr
gethostbyname
htons
getpeername
WSAGetOverlappedResult
recvfrom
ntohs
sendto
WSARecv
WSASend
setsockopt
WSAStartup
WSACleanup
shutdown
socket
WSAGetLastError
inet_addr
bind
connect
send
ioctlsocket
select
accept
recv
closesocket
getsockname
listen
mswsock
TransmitFile
shell32
CommandLineToArgvW
rpcrt4
UuidCreate
msvcr90
wcsncmp
_getpid
_strnicmp
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
strftime
_endthreadex
_beginthreadex
__doserrno
getenv
calloc
_strtoi64
modf
tolower
isspace
fputs
_getch
fputc
iscntrl
strchr
isxdigit
strncmp
isdigit
islower
isupper
wcschr
strrchr
memset
memcpy
_get_osfhandle
_setmode
_close
_dup2
_open_osfhandle
_commit
_isatty
setvbuf
fflush
__iob_func
toupper
memmove
isalpha
_stricmp
rand
srand
free
malloc
strerror
fprintf
realloc
atoi
sprintf
_wenviron
_environ
_errno
strspn
strtol
memchr
exit
Rapr_allocator_alloc@8
Rapr_allocator_create@4
Rapr_allocator_destroy@4
Rapr_allocator_free@8
Rapr_allocator_max_free_set@8
Rapr_allocator_mutex_get@4
Rapr_allocator_mutex_set@8
Rapr_allocator_owner_get@4
Rapr_allocator_owner_set@8
Rapr_app_initialize@12
Rapr_array_append@12
Rapr_array_cat@8
Rapr_array_clear@4
Rapr_array_copy@8
Rapr_array_copy_hdr@8
Rapr_array_make@12
Rapr_array_pop@4
Rapr_array_pstrcat@12
Rapr_array_push@4
Rapr_atoi64@4
Rapr_atomic_add32@8
Rapr_atomic_cas32@12
Rapr_atomic_casptr@12
Rapr_atomic_dec32@4
Rapr_atomic_inc32@4
Rapr_atomic_init@4
Rapr_atomic_read32@4
Rapr_atomic_set32@8
Rapr_atomic_sub32@8
Rapr_atomic_xchg32@8
Rapr_atomic_xchgptr@8
Rapr_collapse_spaces@8
Rapr_conv_ucs2_to_utf8@16
Rapr_conv_utf8_to_ucs2@16
Rapr_cpystrn@12
Rapr_crypto_sha256_new@4
Rapr_ctime@12
Rapr_dir_close@4
Rapr_dir_make@12
Rapr_dir_make_recursive@12
Rapr_dir_open@12
Rapr_dir_read@12
Rapr_dir_remove@8
Rapr_dir_rewind@4
Rapr_dso_error@12
Rapr_dso_load@12
Rapr_dso_sym@12
Rapr_dso_unload@4
Rapr_env_delete@8
Rapr_env_get@12
Rapr_env_set@12
Rapr_escape_echo@20
Rapr_escape_entity@20
Rapr_escape_hex@20
Rapr_escape_path@20
Rapr_escape_path_segment@16
Rapr_escape_shell@16
Rapr_escape_urlencoded@16
Rapr_file_append@16
Rapr_file_attrs_set@16
Rapr_file_buffer_set@12
Rapr_file_buffer_size_get@4
Rapr_file_close@4
Rapr_file_copy@16
Rapr_file_data_get@12
Rapr_file_data_set@16
Rapr_file_datasync@4
Rapr_file_dup2@12
Rapr_file_dup@12
Rapr_file_eof@4
Rapr_file_flags_get@4
Rapr_file_flush@4
Rapr_file_getc@8
Rapr_file_gets@12
Rapr_file_info_get@12
Rapr_file_inherit_set@4
Rapr_file_inherit_unset@4
Rapr_file_link@8
Rapr_file_lock@8
Rapr_file_mktemp@16
Rapr_file_mtime_set@16
Rapr_file_name_get@8
Rapr_file_namedpipe_create@12
Rapr_file_open@20
Rapr_file_open_flags_stderr@12
Rapr_file_open_flags_stdin@12
Rapr_file_open_flags_stdout@12
Rapr_file_open_stderr@8
Rapr_file_open_stdin@8
Rapr_file_open_stdout@8
Rapr_file_perms_set@8
Rapr_file_pipe_create@12
Rapr_file_pipe_create_ex@16
Rapr_file_pipe_timeout_get@8
Rapr_file_pipe_timeout_set@12
Rapr_file_pool_get@4
Rapr_file_putc@8
Rapr_file_puts@8
Rapr_file_read@12
Rapr_file_read_full@16
Rapr_file_remove@8
Rapr_file_rename@12
Rapr_file_seek@12
Rapr_file_setaside@12
Rapr_file_sync@4
Rapr_file_trunc@12
Rapr_file_ungetc@8
Rapr_file_unlock@4
Rapr_file_write@12
Rapr_file_write_full@16
Rapr_file_writev@16
Rapr_file_writev_full@16
Rapr_filepath_encoding@8
Rapr_filepath_get@12
Rapr_filepath_list_merge@12
Rapr_filepath_list_split@12
Rapr_filepath_merge@20
Rapr_filepath_name_get@4
Rapr_filepath_root@16
Rapr_filepath_set@8
Rapr_fnmatch@12
Rapr_fnmatch_test@4
Rapr_generate_random_bytes@8
Rapr_gethostname@12
Rapr_getnameinfo@12
Rapr_getopt@16
Rapr_getopt_init@16
Rapr_getopt_long@16
Rapr_getservbyname@8
Rapr_gid_compare@8
Rapr_gid_get@12
Rapr_gid_name_get@12
Rapr_hash_clear@4
Rapr_hash_copy@8
Rapr_hash_count@4
Rapr_hash_do@12
Rapr_hash_first@8
Rapr_hash_get@12
Rapr_hash_make@4
Rapr_hash_make_custom@8
Rapr_hash_merge@20
Rapr_hash_next@4
Rapr_hash_overlay@12
Rapr_hash_pool_get@4
Rapr_hash_set@16
Rapr_hash_this@16
Rapr_hash_this_key@4
Rapr_hash_this_key_len@4
Rapr_hash_this_val@4
Rapr_initialize@0
Rapr_ipsubnet_create@16
Rapr_ipsubnet_test@8
Rapr_is_empty_array@4
Rapr_is_empty_table@4
Rapr_itoa@8
Rapr_ltoa@8
Rapr_match_glob@12
Rapr_mcast_hops@8
Rapr_mcast_interface@8
Rapr_mcast_join@16
Rapr_mcast_leave@16
Rapr_mcast_loopback@8
Rapr_mmap_create@28
Rapr_mmap_delete@4
Rapr_mmap_dup@12
Rapr_mmap_offset@16
Rapr_off_t_toa@12
Rapr_os_default_encoding@4
Rapr_os_dir_get@8
Rapr_os_dir_put@12
Rapr_os_dso_handle_get@8
Rapr_os_dso_handle_put@12
Rapr_os_exp_time_get@8
Rapr_os_exp_time_put@12
Rapr_os_file_get@8
Rapr_os_file_put@16
Rapr_os_imp_time_get@8
Rapr_os_imp_time_put@12
Rapr_os_locale_encoding@4
Rapr_os_pipe_put@12
Rapr_os_pipe_put_ex@16
Rapr_os_proc_mutex_get@8
Rapr_os_proc_mutex_put@12
Rapr_os_shm_get@8
Rapr_os_shm_put@12
Rapr_os_sock_get@8
Rapr_os_sock_make@12
Rapr_os_sock_put@12
Rapr_os_thread_current@0
Rapr_os_thread_equal@8
Rapr_os_thread_get@8
Rapr_os_thread_put@12
Rapr_os_threadkey_get@8
Rapr_os_threadkey_put@12
Rapr_os_uuid_get@4
Rapr_palloc@8
Rapr_palloc_debug@12
Rapr_parse_addr_port@20
Rapr_password_get@12
Rapr_pcalloc@8
Rapr_pcalloc_debug@12
Rapr_pescape_echo@12
Rapr_pescape_entity@12
Rapr_pescape_hex@16
Rapr_pescape_path@12
Rapr_pescape_path_segment@8
Rapr_pescape_shell@8
Rapr_pescape_urlencoded@8
Rapr_pmemdup@12
Rapr_poll@20
Rapr_poll_method_defname@0
Rapr_pollcb_add@8
Rapr_pollcb_create@16
Rapr_pollcb_create_ex@20
Rapr_pollcb_poll@20
Rapr_pollcb_remove@8
Rapr_pollset_add@8
Rapr_pollset_create@16
Rapr_pollset_create_ex@20
Rapr_pollset_destroy@4
Rapr_pollset_method_name@4
Rapr_pollset_poll@20
Rapr_pollset_remove@8
Rapr_pollset_wakeup@4
Rapr_pool_abort_get@4
Rapr_pool_abort_set@8
Rapr_pool_allocator_get@4
Rapr_pool_child_cleanup_set@16
Rapr_pool_cleanup_for_exec@0
Rapr_pool_cleanup_kill@12
Rapr_pool_cleanup_register@16
Rapr_pool_cleanup_run@12
Rapr_pool_clear@4
Rapr_pool_clear_debug@8
Rapr_pool_create_core_ex@12
Rapr_pool_create_core_ex_debug@16
Rapr_pool_create_ex@16
Rapr_pool_create_ex_debug@20
Rapr_pool_create_unmanaged_ex@12
Rapr_pool_create_unmanaged_ex_debug@16
Rapr_pool_destroy@4
Rapr_pool_destroy_debug@8
Rapr_pool_initialize@0
Rapr_pool_is_ancestor@8
Rapr_pool_note_subprocess@12
Rapr_pool_parent_get@4
Rapr_pool_pre_cleanup_register@12
Rapr_pool_tag@8
Rapr_pool_terminate@0
Rapr_pool_userdata_get@12
Rapr_pool_userdata_set@16
Rapr_pool_userdata_setn@16
Rapr_proc_create@24
Rapr_proc_detach@4
Rapr_proc_kill@8
Rapr_proc_mutex_child_init@12
Rapr_proc_mutex_cleanup@4
Rapr_proc_mutex_create@16
Rapr_proc_mutex_defname@0
Rapr_proc_mutex_destroy@4
Rapr_proc_mutex_lock@4
Rapr_proc_mutex_lockfile@4
Rapr_proc_mutex_name@4
Rapr_proc_mutex_pool_get@4
Rapr_proc_mutex_trylock@4
Rapr_proc_mutex_unlock@4
Rapr_proc_other_child_alert@12
Rapr_proc_other_child_refresh@8
Rapr_proc_other_child_refresh_all@4
Rapr_proc_other_child_register@20
Rapr_proc_other_child_unregister@4
Rapr_proc_wait@16
Rapr_proc_wait_all_procs@20
Rapr_procattr_addrspace_set@8
Rapr_procattr_child_err_set@12
Rapr_procattr_child_errfn_set@8
Rapr_procattr_child_in_set@12
Rapr_procattr_child_out_set@12
Rapr_procattr_cmdtype_set@8
Rapr_procattr_create@8
Rapr_procattr_detach_set@8
Rapr_procattr_dir_set@8
Rapr_procattr_error_check_set@8
Rapr_procattr_group_set@8
Rapr_procattr_io_set@16
Rapr_procattr_user_set@12
Rapr_pstrcatv@16
Rapr_pstrdup@8
Rapr_pstrmemdup@12
Rapr_pstrndup@12
Rapr_punescape_entity@8
Rapr_punescape_hex@16
Rapr_punescape_url@20
Rapr_pvsprintf@12
Rapr_random_add_entropy@12
Rapr_random_after_fork@4
Rapr_random_barrier@4
Rapr_random_init@20
Rapr_random_insecure_bytes@12
Rapr_random_insecure_ready@4
Rapr_random_secure_bytes@12
Rapr_random_secure_ready@4
Rapr_random_standard_new@4
Rapr_rfc822_date@12
Rapr_shm_attach@12
Rapr_shm_attach_ex@16
Rapr_shm_baseaddr_get@4
Rapr_shm_create@16
Rapr_shm_create_ex@20
Rapr_shm_destroy@4
Rapr_shm_detach@4
Rapr_shm_pool_get@4
Rapr_shm_remove@8
Rapr_shm_size_get@4
Rapr_signal_block@4
Rapr_signal_description_get@4
Rapr_signal_unblock@4
Rapr_skiplist_add_index@12
Rapr_skiplist_alloc@8
Rapr_skiplist_destroy@8
Rapr_skiplist_find@12
Rapr_skiplist_find_compare@16
Rapr_skiplist_free@8
Rapr_skiplist_getlist@4
Rapr_skiplist_init@8
Rapr_skiplist_insert@8
Rapr_skiplist_insert_compare@12
Rapr_skiplist_merge@8
Rapr_skiplist_next@8
Rapr_skiplist_peek@4
Rapr_skiplist_pop@8
Rapr_skiplist_previous@8
Rapr_skiplist_remove@12
Rapr_skiplist_remove_all@8
Rapr_skiplist_remove_compare@16
Rapr_skiplist_set_compare@12
Rapr_sleep@8
Rapr_sockaddr_equal@8
Rapr_sockaddr_info_get@24
Rapr_sockaddr_ip_get@8
Rapr_sockaddr_ip_getbuf@12
Rapr_sockaddr_is_wildcard@4
Rapr_socket_accept@12
Rapr_socket_addr_get@12
Rapr_socket_atmark@8
Rapr_socket_atreadeof@8
Rapr_socket_bind@8
Rapr_socket_close@4
Rapr_socket_connect@8
Rapr_socket_create@20
Rapr_socket_data_get@12
Rapr_socket_data_set@16
Rapr_socket_inherit_set@4
Rapr_socket_inherit_unset@4
Rapr_socket_listen@8
Rapr_socket_opt_get@12
Rapr_socket_opt_set@12
Rapr_socket_pool_get@4
Rapr_socket_protocol_get@8
Rapr_socket_recv@12
Rapr_socket_recvfrom@20
Rapr_socket_send@12
Rapr_socket_sendfile@24
Rapr_socket_sendto@20
Rapr_socket_sendv@16
Rapr_socket_shutdown@8
Rapr_socket_timeout_get@8
Rapr_socket_timeout_set@12
Rapr_socket_type_get@8
Rapr_stat@16
Rapr_strerror@12
Rapr_strfsize@12
Rapr_strftime@20
Rapr_strnatcasecmp@8
Rapr_strnatcmp@8
Rapr_strtoff@16
Rapr_strtoi64@12
Rapr_strtok@12
Rapr_table_add@12
Rapr_table_addn@12
Rapr_table_clear@4
Rapr_table_clone@8
Rapr_table_compress@8
Rapr_table_copy@8
Rapr_table_elts@4
Rapr_table_get@8
Rapr_table_getm@12
Rapr_table_make@8
Rapr_table_merge@12
Rapr_table_mergen@12
Rapr_table_overlap@12
Rapr_table_overlay@12
Rapr_table_set@12
Rapr_table_setn@12
Rapr_table_unset@8
Rapr_table_vdo@16
Rapr_temp_dir_get@8
Rapr_terminate2@0
Rapr_thread_cond_broadcast@4
Rapr_thread_cond_create@8
Rapr_thread_cond_destroy@4
Rapr_thread_cond_pool_get@4
Rapr_thread_cond_signal@4
Rapr_thread_cond_timedwait@16
Rapr_thread_cond_wait@8
Rapr_thread_create@20
Rapr_thread_data_get@12
Rapr_thread_data_set@16
Rapr_thread_detach@4
Rapr_thread_exit@8
Rapr_thread_join@8
Rapr_thread_mutex_create@12
Rapr_thread_mutex_destroy@4
Rapr_thread_mutex_lock@4
Rapr_thread_mutex_pool_get@4
Rapr_thread_mutex_trylock@4
Rapr_thread_mutex_unlock@4
Rapr_thread_once@8
Rapr_thread_once_init@8
Rapr_thread_pool_get@4
Rapr_thread_rwlock_create@8
Rapr_thread_rwlock_destroy@4
Rapr_thread_rwlock_pool_get@4
Rapr_thread_rwlock_rdlock@4
Rapr_thread_rwlock_tryrdlock@4
Rapr_thread_rwlock_trywrlock@4
Rapr_thread_rwlock_unlock@4
Rapr_thread_rwlock_wrlock@4
Rapr_thread_yield@0
Rapr_threadattr_create@8
Rapr_threadattr_detach_get@4
Rapr_threadattr_detach_set@8
Rapr_threadattr_guardsize_set@8
Rapr_threadattr_stacksize_set@8
Rapr_threadkey_data_get@12
Rapr_threadkey_data_set@16
Rapr_threadkey_private_create@12
Rapr_threadkey_private_delete@4
Rapr_threadkey_private_get@8
Rapr_threadkey_private_set@8
Rapr_time_ansi_put@12
Rapr_time_clock_hires@4
Rapr_time_exp_get@8
Rapr_time_exp_gmt@12
Rapr_time_exp_gmt_get@8
Rapr_time_exp_lt@12
Rapr_time_exp_tz@16
Rapr_time_now@0
Rapr_tokenize_to_argv@12
Rapr_uid_compare@8
Rapr_uid_current@12
Rapr_uid_get@16
Rapr_uid_homepath_get@12
Rapr_uid_name_get@12
Rapr_unescape_entity@16
Rapr_unescape_hex@20
Rapr_unescape_url@28
Rapr_version@4
Rapr_version_string@0
Rapr_vformatter@16
Rapr_vsnprintf@16
Rpr_app_init_complete
Rpr_day_snames
Rpr_dbg_log
Rpr_file_printf
Rpr_hashfunc_default
Rpr_month_snames
Rpr_os_level
Rpr_pool_cleanup_null
Rpr_psprintf
Rpr_pstrcat
Rpr_snprintf
Rpr_table_do
Time
Name
.text
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
112KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ