ModuleBegin
ModuleEnd
ModuleSleep
ModuleStart
ModuleStart64
Static task
static1
Behavioral task
behavioral1
Sample
889a7ae42fb44390ab99af071dd3d6b0.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
889a7ae42fb44390ab99af071dd3d6b0.dll
Resource
win10v2004-20230220-en
Target
889a7ae42fb44390ab99af071dd3d6b0.bin
Size
199KB
MD5
889a7ae42fb44390ab99af071dd3d6b0
SHA1
0781a2b6eb656d110a3a8f60e8bce9d407e4c4ff
SHA256
ee6a3331c6b8f3f955def71a6c7c97bf86ddf4ce3e75a63ea4e9cd6e20701024
SHA512
3a0db89b6398603ad7f0f8af07cb2be4c3b63547d3774b2159ad93078b4d54b2dc6ed455630a277e4a715653703766feaa78573e4ef6192848ec2d585c80478d
SSDEEP
3072:5hukT8QowKlpMGTxfZBxGEHZXNu2Rh/DwwcyZgnk8MjATHVCGJkFNcLa:5hukiwKlDTTjGEtdDDbceATHorF2La
Checks for missing Authenticode signature.
resource |
---|
889a7ae42fb44390ab99af071dd3d6b0.bin |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MapViewOfFile
CreateFileMappingA
CloseHandle
GetFileSizeEx
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
CopyFileW
GetTempPathA
DeleteFileA
ReadFile
SetFilePointer
GetProcAddress
LoadLibraryA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetExitCodeThread
WaitForSingleObject
Sleep
CreateThread
FreeLibrary
GetModuleHandleA
VirtualFree
WriteProcessMemory
VirtualAlloc
OutputDebugStringA
ReadProcessMemory
VirtualQueryEx
InterlockedExchange
Module32Next
UnmapViewOfFile
GetCurrentProcess
GetCommandLineA
CopyFileA
GetTempFileNameA
GetLongPathNameA
GetModuleFileNameA
lstrcatA
lstrcpyA
GetLastError
GetPrivateProfileStringA
GetSystemDirectoryA
GetVersionExA
SetEvent
GetFileSize
WriteFile
GetPrivateProfileIntA
CreateEventA
WinExec
CreateFileW
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryW
GetTempPathW
FindNextFileW
FindFirstFileW
GetSystemInfo
SetEndOfFile
OpenProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
Module32First
InitializeCriticalSection
GetProcessHeap
LCMapStringW
WriteConsoleW
SetStdHandle
LoadLibraryW
HeapReAlloc
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameW
GetCurrentProcessId
GetTickCount
RtlUnwind
RaiseException
EncodePointer
DecodePointer
GetFileAttributesA
GetSystemTimeAsFileTime
GetCurrentThreadId
IsProcessorFeaturePresent
HeapFree
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
HeapSize
ExitProcess
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
MessageBoxW
GetSystemMetrics
wsprintfW
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
SHGetSpecialFolderPathA
CoCreateInstance
CoInitializeEx
CoUninitialize
GetModuleFileNameExA
ExpandEnvironmentStringsForUserA
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
PathRemoveFileSpecA
PathAppendW
ModuleBegin
ModuleEnd
ModuleSleep
ModuleStart
ModuleStart64
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ