lc_encodeA
lc_getA
lc_getslist
lc_postA
Static task
static1
Behavioral task
behavioral1
Sample
30280fe81b7138ba5fbe616b461b2d6d112603e03b288d0a36da1a3fc7a5fc57.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
30280fe81b7138ba5fbe616b461b2d6d112603e03b288d0a36da1a3fc7a5fc57.dll
Resource
win10v2004-20230703-en
Target
30280fe81b7138ba5fbe616b461b2d6d112603e03b288d0a36da1a3fc7a5fc57
Size
498KB
MD5
9b0f37a1fdff06a9fef59925e76a7f21
SHA1
3a86343e6ea1878eb4be473e811dc84b21d0f4a3
SHA256
30280fe81b7138ba5fbe616b461b2d6d112603e03b288d0a36da1a3fc7a5fc57
SHA512
ff98c2eaf4a42155ddd5a6b7c36c0d107a55d08b59d4fc75260bc3b9b7e33c7929d09430a0e61115ab7016e2fea0d7a9e78b2652f8230ea39324313b4c3dd4df
SSDEEP
6144:75YbskemPro4mYro4mc4ZcWDny60ioHI57oI/H9aM4ruATSgAzTZZAO5LNfX:75aeMo4Xo4u1yj9HI5sydaM0uATQZbp
Checks for missing Authenticode signature.
resource |
---|
30280fe81b7138ba5fbe616b461b2d6d112603e03b288d0a36da1a3fc7a5fc57 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LeaveCriticalSection
DeleteCriticalSection
Sleep
SleepEx
GetTickCount
WaitForSingleObject
FreeLibrary
GetProcAddress
GetLastError
WaitForMultipleObjects
GetFileType
GetStdHandle
ReadFile
PeekNamedPipe
ExpandEnvironmentStringsA
SetLastError
FormatMessageA
VerSetConditionMask
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
VerifyVersionInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
EncodePointer
RaiseException
InterlockedFlushSList
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateFileW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
EnterCriticalSection
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
SetFilePointerEx
ExitProcess
GetModuleFileNameA
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
HeapFree
HeapAlloc
GetACP
GetStringTypeW
HeapReAlloc
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentDirectoryW
GetFullPathNameW
SetStdHandle
FlushFileBuffers
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
WriteConsoleW
GetFileAttributesExW
SetEndOfFile
GetTimeZoneInformation
HeapSize
DecodePointer
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
Process32NextW
Process32FirstW
FileTimeToSystemTime
CreateToolhelp32Snapshot
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
RegCloseKey
RegOpenKeyExW
CryptAcquireContextA
CryptImportKey
socket
WSAIoctl
getaddrinfo
freeaddrinfo
accept
setsockopt
recvfrom
sendto
ioctlsocket
gethostname
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
WSACleanup
listen
WSAStartup
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord60
ord211
ord46
ord143
ord301
lc_encodeA
lc_getA
lc_getslist
lc_postA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ