ExportFunc1
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
Static task
static1
Behavioral task
behavioral1
Sample
2ce452a165f142a868a89c2e111055e154336328966394eb822d9de6db766f6b.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
2ce452a165f142a868a89c2e111055e154336328966394eb822d9de6db766f6b.dll
Resource
win10v2004-20230621-en
Target
2ce452a165f142a868a89c2e111055e154336328966394eb822d9de6db766f6b
Size
1.5MB
MD5
4d58d5765185128247f110cc57cb742d
SHA1
85e234f06b4253a9cde1d9534a73d986017d4397
SHA256
2ce452a165f142a868a89c2e111055e154336328966394eb822d9de6db766f6b
SHA512
c43d7f4c42e210ab2a0b2ee61fa3ce6b09f172a6799e7fc01c4937fa237a368e692e93fc57453a2e7b86cc66d29f7e0074b95b0a11ae0a5be6e7a2965279397c
SSDEEP
49152:t9lCNky2euKEP8wCACLWWPp7q40DYVAPaTQ5:XFeuKAQACLWWx7KYa
Checks for missing Authenticode signature.
resource |
---|
2ce452a165f142a868a89c2e111055e154336328966394eb822d9de6db766f6b |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PathFindFileNameW
PathRemoveFileSpecW
StrStrIW
CreateThread
GetFileSize
WriteFile
ReadFile
CloseHandle
DeleteFileW
SetFilePointer
GetModuleFileNameW
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
CopyFileW
Sleep
TerminateThread
WaitForSingleObject
GetLastError
DisableThreadLibraryCalls
IsBadReadPtr
CreateFileW
GetEnvironmentVariableW
GetProcAddress
ExpandEnvironmentStringsW
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetDriveTypeW
SearchPathW
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetShortPathNameW
CreateMutexW
OpenMutexW
ReleaseMutex
FreeLibrary
LoadLibraryExW
GetModuleHandleW
LoadLibraryW
GetCurrentProcess
OpenProcess
QueryDosDeviceW
FormatMessageW
LocalFree
SetEndOfFile
SetFileTime
GetFileTime
HeapAlloc
HeapFree
GetProcessHeap
GlobalAlloc
GetVersionExW
GetComputerNameExW
GlobalFree
FindResourceW
LoadResource
LockResource
GetSystemInfo
lstrcmpiW
FindClose
FindNextFileW
GetFullPathNameW
GetTempFileNameW
MoveFileExW
CreateDirectoryW
GetSystemDirectoryW
GetFileAttributesW
lstrlenW
GetTempPathW
GetCurrentDirectoryW
MoveFileW
SetCurrentDirectoryW
RemoveDirectoryW
GetWindowsDirectoryW
SetFileAttributesW
FileTimeToDosDateTime
DosDateTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
LocalFileTimeToFileTime
GetTickCount
InterlockedExchange
InterlockedExchangeAdd
SetLastError
GetLogicalDriveStringsW
GetDiskFreeSpaceW
GetVolumeInformationW
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
LoadLibraryA
DeviceIoControl
lstrcatW
lstrcpyW
GetFileSizeEx
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
EncodePointer
GetStringTypeW
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
FatalAppExitA
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetCurrentThread
GetStdHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetTimeZoneInformation
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapReAlloc
SetConsoleCtrlHandler
ReadConsoleW
SetStdHandle
WriteConsoleW
OutputDebugStringW
SetEnvironmentVariableA
VirtualFree
VirtualAlloc
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CryptMsgClose
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
UnregisterClassW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
ExportFunc1
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ