lc_encodeA
lc_getA
lc_getslist
lc_postA
Static task
static1
Behavioral task
behavioral1
Sample
00328207b17080c3a07988d02b1a4a32b5cfbd77af9b091ce29e7275bedd040e.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
00328207b17080c3a07988d02b1a4a32b5cfbd77af9b091ce29e7275bedd040e.dll
Resource
win10v2004-20230621-en
Target
00328207b17080c3a07988d02b1a4a32b5cfbd77af9b091ce29e7275bedd040e
Size
498KB
MD5
d144d79b2f3e521060ee69c125cb9319
SHA1
61af3aaf52d25743ac94df824825838d226244b4
SHA256
00328207b17080c3a07988d02b1a4a32b5cfbd77af9b091ce29e7275bedd040e
SHA512
d3670eccdde16b31c5e7a22d35590565eaaffe797a5129e551e7187af4c97c62740538b0378f154993fe978be9260891e03cd39c8d2f097bc5ca830a61539385
SSDEEP
6144:7VQBYbskemHHrs1Qi3a72mrCDHI57oIfQ7lopTZ0wYyYz1qG94oi5LNfX:7Cae11zPDHI5saC4sBBtAp
Checks for missing Authenticode signature.
resource |
---|
00328207b17080c3a07988d02b1a4a32b5cfbd77af9b091ce29e7275bedd040e |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LeaveCriticalSection
DeleteCriticalSection
Sleep
SleepEx
GetTickCount
WaitForSingleObject
FreeLibrary
GetProcAddress
GetLastError
WaitForMultipleObjects
GetFileType
GetStdHandle
ReadFile
PeekNamedPipe
ExpandEnvironmentStringsA
SetLastError
FormatMessageA
VerSetConditionMask
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
VerifyVersionInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
EncodePointer
RaiseException
InterlockedFlushSList
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateFileW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
EnterCriticalSection
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
SetFilePointerEx
ExitProcess
GetModuleFileNameA
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
HeapFree
HeapAlloc
GetACP
GetStringTypeW
HeapReAlloc
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentDirectoryW
GetFullPathNameW
SetStdHandle
FlushFileBuffers
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
WriteConsoleW
GetFileAttributesExW
SetEndOfFile
GetTimeZoneInformation
HeapSize
DecodePointer
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
Process32NextW
Process32FirstW
FileTimeToSystemTime
CreateToolhelp32Snapshot
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
RegCloseKey
RegOpenKeyExW
CryptAcquireContextA
CryptImportKey
socket
WSAIoctl
getaddrinfo
freeaddrinfo
accept
setsockopt
recvfrom
sendto
ioctlsocket
gethostname
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
WSACleanup
listen
WSAStartup
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord60
ord211
ord46
ord143
ord301
lc_encodeA
lc_getA
lc_getslist
lc_postA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ