VisibleEntry
beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo
Static task
static1
Behavioral task
behavioral1
Sample
ta.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ta.dll
Resource
win10v2004-20230220-en
Target
ta.dll
Size
1.8MB
MD5
71ce05ca841220984e19e33847e05088
SHA1
13918daa77b63c080e7c304eb89debe42f7c6505
SHA256
852a50fa12c5b2cb1f54a5db5714a3c8cdf2e364ca35ae0ee53092a21a16819a
SHA512
6ca8f423abf089c1b9ca5b0135827851ecbdf30bc56b4f00caf7ee18d610a92e4dd9fc3e8a9ba87ff57993a407f36149e6a69516abb4479419cfcbfad38841df
SSDEEP
24576:00Jtv4ae8evAHD+KgGOFxeI4eWHn6K+2SY9fvrRDWq0l4QvtV+g9Fm62GD1pvZqO:ZJN76AjtI4ew6DY9VN06QC0mi1pBqO
Checks for missing Authenticode signature.
resource |
---|
ta.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WinHttpConnect
WinHttpReceiveResponse
WinHttpOpen
WinHttpReadData
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSendRequest
WinHttpQueryDataAvailable
PathFindFileNameW
PathFileExistsW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
SizeofResource
LockResource
GlobalAlloc
GlobalFree
LoadResource
FindResourceW
GlobalLock
LoadLibraryA
ExitProcess
GetModuleHandleW
DebugBreak
lstrcpyW
CreateDirectoryW
ReadFile
SetHandleInformation
GetModuleFileNameW
CreatePipe
GetCurrentThreadId
Sleep
CloseHandle
GetLocalTime
GetTimeFormatW
CreateProcessW
GetDateFormatW
AreFileApisANSI
EnterCriticalSection
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateFileW
GetFileAttributesW
GetVersionExW
UnmapViewOfFile
MultiByteToWideChar
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
CreateFileA
DeleteFileA
SetEnvironmentVariableW
GetSystemInfo
LoadLibraryW
UnlockFile
GetProcAddress
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
GetTimeZoneInformation
ReadConsoleW
HeapAlloc
GetCommandLineA
HeapFree
GetConsoleMode
GetConsoleOutputCP
GetFileType
GetStdHandle
SetFilePointerEx
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleExW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
InterlockedFlushSList
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
GetCommandLineW
GetProcessHeap
SetStdHandle
WriteConsoleW
HeapSize
DeleteFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
EnumChildWindows
CallNextHookEx
MoveWindow
UnhookWindowsHookEx
EnumWindows
SetWindowsHookExW
EnableMenuItem
SetForegroundWindow
SendInput
GetWindowTextW
MessageBoxW
SetWindowTextW
ShowWindow
EnableWindow
CallWindowProcW
GetFocus
IsWindowVisible
GetDlgItemTextW
SendDlgItemMessageW
GetSysColor
SetFocus
GetDlgItem
UpdateWindow
InvalidateRect
GetWindowLongW
CreateDialogParamW
GetWindowRect
ClientToScreen
SetWindowLongW
GetClientRect
CreateDialogIndirectParamW
SendMessageW
DestroyWindow
SetActiveWindow
SetDlgItemTextW
GetKeyState
SetWindowPos
SetTextColor
SetBkMode
CreateSolidBrush
CreateFontW
GetSaveFileNameW
VisibleEntry
beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ