ExportFunc1
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
Static task
static1
Behavioral task
behavioral1
Sample
ea90749a2dcb59b57895134b9e653ab33325e10ab4068c7b7280d8ba13084abb.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ea90749a2dcb59b57895134b9e653ab33325e10ab4068c7b7280d8ba13084abb.dll
Resource
win10v2004-20230703-en
Target
ea90749a2dcb59b57895134b9e653ab33325e10ab4068c7b7280d8ba13084abb
Size
1.5MB
MD5
63304e5426a0a4fa3b270b5ed4c74812
SHA1
fdb958ef2c1bf2758dc8cfdbdadb21233ddd7035
SHA256
ea90749a2dcb59b57895134b9e653ab33325e10ab4068c7b7280d8ba13084abb
SHA512
a14af7c6ca5f089566e134beeed5210fc8a40d98d6630fd7b41b632b470c2ac8912fe7be0debe05b5954ac6015b8010a4fd9f6a9dc5d1e48d39b7aa157668d26
SSDEEP
49152:t9lCNky2euKEP8wCACLWWPp7q40DYVAPaTQ5N:XFeuKAQACLWWx7KYa
Checks for missing Authenticode signature.
resource |
---|
ea90749a2dcb59b57895134b9e653ab33325e10ab4068c7b7280d8ba13084abb |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathFindFileNameW
PathRemoveFileSpecW
StrStrIW
CreateThread
GetFileSize
WriteFile
ReadFile
CloseHandle
DeleteFileW
SetFilePointer
GetModuleFileNameW
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
CopyFileW
Sleep
TerminateThread
WaitForSingleObject
GetLastError
DisableThreadLibraryCalls
IsBadReadPtr
CreateFileW
GetEnvironmentVariableW
GetProcAddress
ExpandEnvironmentStringsW
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetDriveTypeW
SearchPathW
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetShortPathNameW
CreateMutexW
OpenMutexW
ReleaseMutex
FreeLibrary
LoadLibraryExW
GetModuleHandleW
LoadLibraryW
GetCurrentProcess
OpenProcess
QueryDosDeviceW
FormatMessageW
LocalFree
SetEndOfFile
SetFileTime
GetFileTime
HeapAlloc
HeapFree
GetProcessHeap
GlobalAlloc
GetVersionExW
GetComputerNameExW
GlobalFree
FindResourceW
LoadResource
LockResource
GetSystemInfo
lstrcmpiW
FindClose
FindNextFileW
GetFullPathNameW
GetTempFileNameW
MoveFileExW
CreateDirectoryW
GetSystemDirectoryW
GetFileAttributesW
lstrlenW
GetTempPathW
GetCurrentDirectoryW
MoveFileW
SetCurrentDirectoryW
RemoveDirectoryW
GetWindowsDirectoryW
SetFileAttributesW
FileTimeToDosDateTime
DosDateTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
LocalFileTimeToFileTime
GetTickCount
InterlockedExchange
InterlockedExchangeAdd
SetLastError
GetLogicalDriveStringsW
GetDiskFreeSpaceW
GetVolumeInformationW
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
LoadLibraryA
DeviceIoControl
lstrcatW
lstrcpyW
GetFileSizeEx
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
EncodePointer
GetStringTypeW
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
FatalAppExitA
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetCurrentThread
GetStdHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetTimeZoneInformation
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapReAlloc
SetConsoleCtrlHandler
ReadConsoleW
SetStdHandle
WriteConsoleW
OutputDebugStringW
SetEnvironmentVariableA
VirtualFree
VirtualAlloc
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CryptMsgClose
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
UnregisterClassW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
ExportFunc1
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ