DllMain
PSGetPropertyDescription
Static task
static1
Behavioral task
behavioral1
Sample
00b6ade6a2ab611fc1f14269e91980fc7f550dd55e018ecf63a2f4c36ec9e03fexe_JC.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
00b6ade6a2ab611fc1f14269e91980fc7f550dd55e018ecf63a2f4c36ec9e03fexe_JC.dll
Resource
win10v2004-20230703-en
Target
00b6ade6a2ab611fc1f14269e91980fc7f550dd55e018ecf63a2f4c36ec9e03fexe_JC.exe
Size
308KB
MD5
cae0f536e562615b8e4788a0d0ab3617
SHA1
dd97e1c6f3cb6d1405191a88236aa59e3beecd9c
SHA256
00b6ade6a2ab611fc1f14269e91980fc7f550dd55e018ecf63a2f4c36ec9e03f
SHA512
dad26c3be2e1b7e63c34117bbe8f07db5808d04134777bb87a2386146920dfa6694e9350422cd92b52cdcf71facc105c0b2144916329a5f53485c38d2998c513
SSDEEP
3072:8sWtVEOJa7TijcC27WjQZO7AWaCWuB1jLTg4xGwhCCvPCNLCPIL6ZkBjv6PTNs1o:4tzoijfKWVNLPTqw1v6NLv6Zcm+sB
Checks for missing Authenticode signature.
resource |
---|
00b6ade6a2ab611fc1f14269e91980fc7f550dd55e018ecf63a2f4c36ec9e03fexe_JC.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
CloseHandle
GetModuleHandleA
GetProcAddress
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetStdHandle
GetConsoleMode
GetLastError
WaitForSingleObject
WriteConsoleW
SetLastError
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetCurrentProcess
ReleaseMutex
GetEnvironmentVariableW
RtlLookupFunctionEntry
GetModuleHandleW
FormatMessageW
GetModuleFileNameW
GetCommandLineW
CreateFileW
GetFullPathNameW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetSystemDirectoryW
GetWindowsDirectoryW
AcquireSRWLockExclusive
CreateProcessW
GetFileAttributesW
DuplicateHandle
CreateThread
GetCurrentProcessId
CreateNamedPipeW
SetThreadStackGuarantee
GetCurrentThread
ReadFileEx
SleepEx
WriteFileEx
ExitProcess
GetCurrentDirectoryW
RtlCaptureContext
AcquireSRWLockShared
ReleaseSRWLockShared
SetFilePointerEx
GetConsoleOutputCP
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
RtlUnwindEx
InterlockedFlushSList
EncodePointer
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlPcToFileHeader
TerminateProcess
GetModuleHandleExW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
MultiByteToWideChar
WideCharToMultiByte
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetFileType
GetStringTypeW
HeapSize
SetStdHandle
FlushFileBuffers
WriteFile
BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
DllMain
PSGetPropertyDescription
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ