Afewjfiasdhfisfivjehafiuheuhfjaefeafgwe
DFFsdfjefhuhfsjkdahfkawherfewge
SDFDSfdsfjweufalkdfjaoiefhiosjdf
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
QAXProtect.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
QAXProtect.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
svrQAXDocProtect_x64.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
svrQAXDocProtect_x64.exe
Resource
win10v2004-20230703-en
Target
d95b5739ce120851910c402408ed638b34f76a648ae941bd364942426dfa9d2d
Size
319KB
MD5
97adda741ea9f5f4db85f4176140dbb5
SHA1
9e95c2902d349402a22d769742484b171bc963b5
SHA256
d95b5739ce120851910c402408ed638b34f76a648ae941bd364942426dfa9d2d
SHA512
4358e759a3d4d27dd4ce1faa06e3d26b9ee4eed3def2040b63fca14493c5b0cc381c168dfec06bbb02792554b90eac9d8d79373b5745b0e5d5193217adff0d06
SSDEEP
6144:SjVhcC4IefLXCRJ1A0LBsLqG8f1d/WhSzMUIHdsNW65Jj/l3u:WHc7IebA1zBsLBCXWMwU7W6HJe
Checks for missing Authenticode signature.
resource |
---|
unpack001/QAXProtect.dll |
unpack001/svrQAXDocProtect_x64.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
Sleep
FreeLibrary
DisableThreadLibraryCalls
SetEndOfFile
WriteConsoleW
RaiseException
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
GetSystemTimeAsFileTime
FindFirstFileExA
FindNextFileA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FindClose
GetCommandLineA
GetCurrentThreadId
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
InterlockedDecrement
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
RtlUnwind
ReadFile
SetFilePointer
GetConsoleMode
ReadConsoleW
CloseHandle
SetLastError
InterlockedIncrement
GetFileType
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
LoadLibraryW
SetFilePointerEx
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetTimeZoneInformation
CompareStringEx
LCMapStringEx
GetStringTypeW
CreateFileW
SetEnvironmentVariableA
MessageBoxA
Afewjfiasdhfisfivjehafiuheuhfjaefeafgwe
DFFsdfjefhuhfsjkdahfkawherfewge
SDFDSfdsfjweufalkdfjaoiefhiosjdf
StartHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateMutexW
HeapSize
GetLastError
HeapReAlloc
CloseHandle
RaiseException
LoadLibraryW
HeapAlloc
DecodePointer
GetProcAddress
DeleteCriticalSection
GetProcessHeap
FreeLibrary
SetLastError
FindNextFileW
GetCurrentProcess
WriteFile
FindClose
CreateFileW
GetModuleFileNameW
GetVersionExW
GetVersion
GetModuleHandleW
GetConsoleMode
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
EnterCriticalSection
HeapFree
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
GetStringTypeW
SetStdHandle
LCMapStringW
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetCommandLineA
GetCommandLineW
GetFileType
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CompareStringW
WriteConsoleW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SHGetValueW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
StrStrIW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ