CscNetApiGetInterface
CscSearchApiGetInterface
OfflineFilesEnable
OfflineFilesGetShareCachingMode
OfflineFilesQueryStatus
OfflineFilesQueryStatusEx
OfflineFilesStart
Static task
static1
Behavioral task
behavioral1
Sample
h/cscapi.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
h/cscapi.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
runme.cmd
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
runme.cmd
Resource
win10v2004-20230703-en
Target
2448143d-5f03-4442-b19c-436c5c5d847e
Size
406KB
MD5
250273294b4708c70d32033c7ad6df7b
SHA1
8e364168955326b86ff03d563b434014b94df435
SHA256
b4889433687ffc311dc81703862a8dd08d53e3fb34e77997e6829fd940bee3e6
SHA512
7ceee5a2494e5265708d03724a72b356178fe77b2c783f649fbe1fd7a58d24bf44e5a9cbf736dfec45ebe972da02e79ff7ff290ba68640d6f1749280d1c9aa42
SSDEEP
768:Sm9XS3GyJMJ+sfjUnPxMHitm2RsvOl4XvkG+0ppZuh:7kbJmPfeMWTRAESH
Checks for missing Authenticode signature.
resource |
---|
unpack001/h/cscapi.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetEnvironmentVariableA
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_time64
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
memset
rand
realloc
srand
strerror
strlen
strncmp
vfprintf
wcslen
GetDesktopWindow
HttpAddRequestHeadersA
HttpOpenRequestA
HttpSendRequestA
InternetConnectA
InternetErrorDlg
InternetOpenA
CscNetApiGetInterface
CscSearchApiGetInterface
OfflineFilesEnable
OfflineFilesGetShareCachingMode
OfflineFilesQueryStatus
OfflineFilesQueryStatusEx
OfflineFilesStart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ