DllRegisterServer
StardxxsrtA
StarhhhcdtA
StartAuu
StatthbdesqrtA
e
sdxc
tttt
wwwqaji
Static task
static1
Behavioral task
behavioral1
Sample
XQWUIJNVqECDV6WD65fgJf2fs.dll
Resource
win7-20230621-en
Target
XQWUIJNVqECDV6WD65fgJf2fs.dll
Size
492KB
MD5
1e6432346ebabb4de8d055c70f3d09fd
SHA1
3196be4c100afbcbec9330b50e772f199217c44b
SHA256
f35cd2ed62b9a4244e5ce50c90d7464e8e4915b594421a2c99d3a9e27be8ef89
SHA512
c4e531bfdbc8ae1ebd3be101831ed1c7831722b962e7acfdcb7132f3ac12c6d696355d4a6a2351148bb0754a1418814539b1fde8347b9b20b60f5b25a6f6ed2b
SSDEEP
6144:TkzytaJpnASmmaNGQ7DYMT1atZNtpTKIEHzCLAcKhIepZn6kdRphRUQP7LwW1:oytafAS/aNPwHbCcKeep5h/uQgW1
Checks for missing Authenticode signature.
Processes:
resource |
---|
XQWUIJNVqECDV6WD65fgJf2fs.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadLibraryW
VirtualAlloc
SetStdHandle
WriteConsoleW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetLastError
HeapFree
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
FlsGetValue
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
GetLocaleInfoW
HeapSize
FatalAppExitA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetConsoleCtrlHandler
FreeLibrary
CreateFileW
CoLoadLibrary
DllRegisterServer
StardxxsrtA
StarhhhcdtA
StartAuu
StatthbdesqrtA
e
sdxc
tttt
wwwqaji
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ