LinkStart
ModuleStart
ModuleStart64
_LinkStart@16
sqlite3_carray_init
sqlite3_csv_init
sqlite3_fileio_init
sqlite3_series_init
sqlite3_shathree_init
Static task
static1
Behavioral task
behavioral1
Sample
f553ea019b79742eabcbacd387231623.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f553ea019b79742eabcbacd387231623.dll
Resource
win10v2004-20230220-en
Target
f553ea019b79742eabcbacd387231623.bin
Size
2.0MB
MD5
f553ea019b79742eabcbacd387231623
SHA1
970babe49945b98efada72b2314b25a008f75843
SHA256
174a62201c7e2af67b7ad37bf7935f064a379f169cf257ca16e912a46ecc9841
SHA512
f8bdf34cdb84505d03c4162f929572fdee70121fd935052481b932f2052e42953cafc26fa3f05678215abbf27dc7febafe6b4fc69538cb82f8f72b359b659bce
SSDEEP
49152:MNk0f0TEwRoYAxBI6mPPusyr32BrqhrQqsXhqdDsvlVSGkItBaL:H0f0wwO4us9WFQqsOovlVSUt
Checks for missing Authenticode signature.
resource |
---|
f553ea019b79742eabcbacd387231623.bin |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DeleteFileA
LoadLibraryW
GetProcAddress
CreateDirectoryW
ReadFile
WriteFile
GetModuleFileNameW
WaitForSingleObject
CreateFileW
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
DeleteFileW
Process32FirstW
CloseHandle
CopyFileW
GetTempFileNameW
CreateProcessA
GetPrivateProfileStringA
VirtualQuery
OutputDebugStringW
GetTempPathA
GetTempFileNameA
InitializeCriticalSection
SetFilePointer
CreateMutexW
GetVersionExW
CreateEventW
Sleep
SetEvent
CreateThread
ResetEvent
GetWindowsDirectoryW
GetFileSize
MultiByteToWideChar
FindFirstFileW
FindClose
UnmapViewOfFile
CreateFileMappingA
FreeLibrary
MapViewOfFile
FindNextFileW
GetPrivateProfileStringW
lstrcmpiW
GetFileInformationByHandle
FileTimeToSystemTime
GetLocalTime
SystemTimeToFileTime
CreateFileMappingW
GetTickCount
SetLastError
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitOnceExecuteOnce
TlsAlloc
TlsGetValue
TlsSetValue
CopyFileA
CreateFileA
LoadLibraryA
FlushFileBuffers
QueryPerformanceCounter
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
GetCurrentProcessId
LockFileEx
UnlockFile
HeapCompact
GetSystemInfo
WaitForSingleObjectEx
FlushViewOfFile
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
FormatMessageW
HeapValidate
GetFileAttributesW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
AreFileApisANSI
GetEnvironmentVariableA
SetFileTime
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
SetFileAttributesW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetShortPathNameW
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
HeapFree
WideCharToMultiByte
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
GetCurrentDirectoryW
GetTimeZoneInformation
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileSizeEx
GetStdHandle
SetCurrentDirectoryA
LocalFree
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsFree
GetModuleHandleW
EncodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
InterlockedFlushSList
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
GetFileType
PeekNamedPipe
ExitProcess
WriteConsoleW
GetDesktopWindow
wsprintfW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
OpenProcessToken
RegCloseKey
SHCreateDirectoryExW
CoInitialize
CoTaskMemFree
CLSIDFromString
CoCreateInstance
PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
PathFileExistsA
PathFileExistsW
StrCmpW
PathAddExtensionW
PathAppendW
PathAppendA
CryptUnprotectData
ExpandEnvironmentStringsForUserW
LinkStart
ModuleStart
ModuleStart64
_LinkStart@16
sqlite3_carray_init
sqlite3_csv_init
sqlite3_fileio_init
sqlite3_series_init
sqlite3_shathree_init
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ