ExportFunc1
ExportFunc10
ExportFunc11
ExportFunc12
ExportFunc13
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
ExportFunc6
ExportFunc7
ExportFunc8
ExportFunc9
Static task
static1
Behavioral task
behavioral1
Sample
a67e404289d775de449dd057862f8506e91a79520eed7ece7ecd16b162b954cc.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
a67e404289d775de449dd057862f8506e91a79520eed7ece7ecd16b162b954cc.dll
Resource
win10v2004-20230621-en
Target
a67e404289d775de449dd057862f8506e91a79520eed7ece7ecd16b162b954cc
Size
4.2MB
MD5
0bd08b7d42b28ee8d344f58804a0791e
SHA1
25c439c72e9f3bf0ce9f25b5a44c32290d227a57
SHA256
a67e404289d775de449dd057862f8506e91a79520eed7ece7ecd16b162b954cc
SHA512
4dbcfdb9fd6e90b0f16c8909f3933f7a74e2a11bbd05028c8fcc50241b5f6f2d90998ca99d32f9448c8d558aa587ea1b63e31babe108693b3499c303c46f9fd1
SSDEEP
98304:iyJ0I2cT+80Taw88LL4MW8JiQgbkXaAILoGBKf:iE0w8JinkdILoGBe
Checks for missing Authenticode signature.
resource |
---|
a67e404289d775de449dd057862f8506e91a79520eed7ece7ecd16b162b954cc |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PathAppendW
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
StrStrIW
PathMatchSpecW
CryptMsgClose
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam
CryptQueryObject
FreeLibrary
LoadLibraryW
GetProcAddress
Sleep
CreateThread
CreateDirectoryW
CopyFileW
InterlockedExchange
FreeResource
FindResourceW
LoadResource
WriteFile
SizeofResource
CreateFileW
FlushFileBuffers
GetWindowsDirectoryW
GetLocalTime
GetFileSize
lstrlenA
FileTimeToSystemTime
ReadFile
FileTimeToLocalFileTime
GetCurrentProcessId
SetFilePointer
GetCurrentThreadId
GetUserDefaultLangID
GetEnvironmentVariableW
GetLogicalDriveStringsW
QueryDosDeviceW
DeleteFileW
DisableThreadLibraryCalls
GetLastError
GetTempPathW
GetModuleFileNameW
IsBadReadPtr
IsBadStringPtrW
GetTempFileNameW
GetTickCount
MoveFileExW
CloseHandle
OpenThread
DeviceIoControl
SetLastError
OpenProcess
ReleaseSemaphore
CreateSemaphoreW
ResumeThread
WideCharToMultiByte
GetACP
MultiByteToWideChar
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
ResetEvent
CreateEventW
OpenEventW
SearchPathW
GetModuleHandleW
GetFileAttributesW
LoadLibraryA
ExpandEnvironmentStringsW
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetShortPathNameW
GetDriveTypeW
TerminateThread
LockResource
GetSystemInfo
lstrcmpiW
GetCurrentProcess
CreateMutexW
OpenMutexW
ReleaseMutex
SetEndOfFile
SetFileTime
SetEvent
FindClose
FindNextFileW
HeapAlloc
HeapFree
GetProcessHeap
GlobalAlloc
GlobalFree
LocalFree
InterlockedExchangeAdd
LoadLibraryExW
GetDiskFreeSpaceW
GetVolumeInformationW
lstrlenW
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
lstrcatW
lstrcpyW
GetFileSizeEx
GetFullPathNameW
GetSystemDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
FormatMessageW
FileTimeToDosDateTime
DosDateTimeToFileTime
SystemTimeToFileTime
GetSystemTime
LocalFileTimeToFileTime
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
GlobalMemoryStatusEx
GetStringTypeW
EncodePointer
HeapReAlloc
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
ExitThread
GetSystemTimeAsFileTime
RtlUnwind
GetCPInfo
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetCurrentThread
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetTimeZoneInformation
SetConsoleCtrlHandler
OutputDebugStringW
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
QueryPerformanceFrequency
MoveFileW
WaitForSingleObject
GetVersionExW
GetFileTime
wsprintfW
UnregisterClassW
RegFlushKey
RegDeleteValueW
AdjustTokenPrivileges
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
LookupPrivilegeValueW
RegOpenKeyExW
OpenSCManagerW
RegSetValueExW
RegCreateKeyExW
CreateServiceW
OpenServiceW
StartServiceW
ChangeServiceConfigW
CloseServiceHandle
LookupPrivilegeNameW
OpenProcessToken
RegCloseKey
RegOpenCurrentUser
GetTokenInformation
SetNamedSecurityInfoW
SHGetSpecialFolderPathW
SHGetFolderPathW
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
GetProcessImageFileNameW
ExportFunc1
ExportFunc10
ExportFunc11
ExportFunc12
ExportFunc13
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
ExportFunc6
ExportFunc7
ExportFunc8
ExportFunc9
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ