??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@$$QAV01@@Z
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@ABV01@@Z
?__autoclassinit2@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAEXI@Z
?__autoclassinit2@RCSQLiteRecordSet@RC@@QAEXI@Z
Static task
static1
Behavioral task
behavioral1
Sample
c1b1e3062b0638717781f0d96d07fa1e3368847ee9e2c38b1b413628415b0218.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
c1b1e3062b0638717781f0d96d07fa1e3368847ee9e2c38b1b413628415b0218.exe
Resource
win10v2004-20230621-en
Target
c1b1e3062b0638717781f0d96d07fa1e3368847ee9e2c38b1b413628415b0218
Size
1.3MB
MD5
66d23bbc4f245905cf3b68bf72e5a75d
SHA1
f393c0ce676f87a3be43b94c827547d6de1c0da7
SHA256
c1b1e3062b0638717781f0d96d07fa1e3368847ee9e2c38b1b413628415b0218
SHA512
af8081b1b9b2491bd5f2fba9c11730d8b773d3ddc00e8cd8b2c961f4661b400e5670c55ff7b628b0d88c7bdf69f6e1f7eb12960cdff55338b59d857dd7a31b14
SSDEEP
24576:PSguuHNuV5UzSzUo0yDzkuAlHbAY6RtqHU5BYTe20dPm4NwpZQWqvoZ/V:PSgLHNuV5UzSzUoLkuAl7Ajl3YT6dPDs
Checks for missing Authenticode signature.
resource |
---|
c1b1e3062b0638717781f0d96d07fa1e3368847ee9e2c38b1b413628415b0218 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?Stop@RCSQLiteUpdateDMgr@RC@@SAXXZ
?Start@RCSQLiteUpdateDMgr@RC@@SAXXZ
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
GdiplusStartup
GdiplusShutdown
ImmDisableIME
?Stop@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAE?AVRCReturnValue@23@XZ
?Start@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAE?AVRCReturnValue@23@ABURCConfigCenterSetting@23@@Z
?GetInstance@RCBasicBusinessConfigCenterDMgr@DM@RC@@SAAAV123@XZ
lstrlenW
LoadLibraryW
GlobalMemoryStatusEx
FreeLibrary
ExpandEnvironmentStringsW
GetVersionExW
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
LocalFree
GetFileAttributesW
InterlockedDecrement
HeapFree
GetModuleHandleExW
FileTimeToSystemTime
FindClose
FindNextFileW
lstrcmpiW
FindResourceW
LoadResource
GetSystemInfo
LockResource
SetLastError
CreateEventW
VirtualQuery
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
GetDiskFreeSpaceW
GetVolumeInformationW
LoadLibraryExW
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
ReleaseMutex
WideCharToMultiByte
MultiByteToWideChar
GetACP
GetFileAttributesExW
GetLongPathNameW
FindFirstFileW
CreateProcessW
OpenProcess
GetDriveTypeW
InterlockedExchangeAdd
ResetEvent
SetEvent
WaitForSingleObject
WaitForMultipleObjects
GetFileSize
DeleteFileW
Sleep
SetEndOfFile
ReadFile
GetWindowsDirectoryW
HeapAlloc
GetFullPathNameW
GetTempPathW
SetFileAttributesW
GetCurrentDirectoryW
CreateDirectoryW
InterlockedIncrement
GetLogicalDriveStringsW
GetEnvironmentVariableW
QueryDosDeviceW
GetUserDefaultLangID
GetCurrentProcessId
GetLocalTime
GetCurrentThreadId
CreateFileW
SetFilePointer
GetModuleFileNameW
WriteFile
CloseHandle
GetLastError
CreateMutexW
GetModuleHandleW
GetProcAddress
InterlockedExchange
SetFileTime
GetFileTime
ResumeThread
GetProcessHeap
GetFileSizeEx
DeviceIoControl
FormatMessageW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
SetThreadPriority
GetExitCodeThread
TlsAlloc
TlsSetValue
TlsFree
GetTimeZoneInformation
GetStartupInfoW
QueryPerformanceCounter
OutputDebugStringW
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
VirtualQueryEx
CreateSemaphoreW
CreateThread
TerminateThread
GetProcessId
ReleaseSemaphore
RtlCaptureContext
lstrcmpW
CreateEventA
LocalAlloc
GetSystemTimeAsFileTime
wsprintfW
QueryServiceStatusEx
OpenServiceW
QueryServiceConfig2W
QueryServiceConfigW
EnumServicesStatusExW
CreateServiceW
CloseServiceHandle
OpenSCManagerW
DeleteService
ControlService
StartServiceW
RegCreateKeyExW
SHGetFolderPathW
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?classic@locale@std@@SAABV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
_Cnd_destroy_in_situ
_Cnd_broadcast
_Mtx_unlock
_Xtime_get_ticks
_Query_perf_counter
_Cnd_wait
_Cnd_register_at_thread_exit
_Mtx_init_in_situ
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
_Mtx_lock
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_destroy_in_situ
?__ExceptionPtrToBool@@YA_NPBX@Z
_Cnd_timedwait
?_Syserror_map@std@@YAPBDH@Z
?_XGetLastError@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_C_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
_Query_perf_frequency
?__ExceptionPtrCopy@@YAXPAXPBX@Z
_Cnd_init_in_situ
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_unregister_at_thread_exit
_Mtx_current_owns
??0task_continuation_context@Concurrency@@AAE@XZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
_Cnd_signal
PathFileExistsW
__std_exception_copy
_purecall
wcsrchr
__std_type_info_name
__std_terminate
__CxxFrameHandler3
__std_exception_destroy
wcschr
wcsstr
strstr
strchr
_except_handler4_common
_CxxThrowException
memset
memcpy
__std_type_info_compare
memmove
memchr
__RTtypeid
_set_purecall_handler
__RTDynamicCast
_initialize_wide_environment
_configure_wide_argv
_get_wide_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
terminate
_invalid_parameter_noinfo_noreturn
_controlfp_s
_initterm
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_c_exit
_initterm_e
_errno
exit
_exit
strerror_s
_set_invalid_parameter_handler
_beginthreadex
_mktime64
_time64
_localtime64
wcstoul
_wtoi
_itow_s
atoi
calloc
_callnewh
_set_new_mode
free
realloc
malloc
fseek
_wfopen_s
__stdio_common_vsnwprintf_s
rewind
fwrite
fread
_set_fmode
__stdio_common_vswscanf
fclose
__stdio_common_vfprintf
__acrt_iob_func
__p__commode
__stdio_common_vsprintf_s
ftell
__stdio_common_vswprintf
__stdio_common_vsprintf
__stdio_common_vswprintf_s
_wcsicmp
isspace
wcscpy_s
_wcsnicmp
towlower
towupper
_stricmp
wcsncpy
tolower
srand
rand
_splitpath_s
ceil
_finite
floor
_except1
_dtest
_isnan
__setusermatherr
_configthreadlocale
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@$$QAV01@@Z
??4RCSQLiteUpdateDMgr@RC@@QAEAAV01@ABV01@@Z
?__autoclassinit2@RCBasicBusinessConfigCenterDMgr@DM@RC@@QAEXI@Z
?__autoclassinit2@RCSQLiteRecordSet@RC@@QAEXI@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ