GetObjGAHelp
GetObjGoogleAnalytics
Static task
static1
Behavioral task
behavioral1
Sample
66b4338a00573e58a9fe35db05d63aa4261d3a166e6f4417fe83402ba7dbe1e7.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
66b4338a00573e58a9fe35db05d63aa4261d3a166e6f4417fe83402ba7dbe1e7.exe
Resource
win10v2004-20230703-en
Target
66b4338a00573e58a9fe35db05d63aa4261d3a166e6f4417fe83402ba7dbe1e7
Size
2.0MB
MD5
63b0a9f878317189cb4ea3087be19db5
SHA1
ccf0c3994ad95b65af4685461e5e0dbe6a6fc574
SHA256
66b4338a00573e58a9fe35db05d63aa4261d3a166e6f4417fe83402ba7dbe1e7
SHA512
4816abd8c7cefd08328c19bbd896cd90a53a59d9d9dbf643e98d0f5b8c1a8340ab09e3e98817f56ae1ca7ee07cf76684276cc1a42572fe16b69c48da5a0ff0eb
SSDEEP
24576:upfUWLH96TOG3Zuiohx37zYH39xTEhZjtUip1Cmv9/YPPCyHXxIzA/PbL1ghO+l0:updWLomo/wx/PevSB/xqpGj
Checks for missing Authenticode signature.
resource |
---|
66b4338a00573e58a9fe35db05d63aa4261d3a166e6f4417fe83402ba7dbe1e7 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ZwQueryVolumeInformationFile
_alldiv
_chkstk
RtlInitUnicodeString
ZwCreateFile
ZwClose
strrchr
wcscpy
_allmul
NtLoadDriver
_wcslwr
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
ZwQueryDirectoryObject
ZwOpenDirectoryObject
strstr
vsprintf
mbstowcs
strchr
strncpy
NtUnloadDriver
ZwUnloadKey
RtlNtStatusToDosError
ZwSetInformationFile
ZwOpenFile
wcsncpy
memcpy
sprintf
memset
wcslen
wcstombs
_vsnprintf
atoi
wcstoul
wcschr
_wcsnicmp
_wcsicmp
_wtoi
wcsstr
wcsrchr
WIMLoadImage
WIMUnregisterMessageCallback
WIMGetImageInformation
WIMGetAttributes
WIMGetImageCount
WIMSetTemporaryPath
WIMCreateFile
WIMRegisterMessageCallback
WIMApplyImage
WIMCloseHandle
FormatExtFs
GetObjGATrackingData
GetPOLoigcObject
CreateGptBootQuickCfgObject
ord2
PAGetGlobalDataObject
PAShowRegisterDlg
PAShowUpgradeDemo2
ord4729
ord4206
ord5178
ord605
ord354
ord1079
ord3311
ord774
ord4101
ord266
ord2460
ord4234
ord1582
ord4100
ord5398
ord2086
ord3395
ord1176
ord2260
ord5485
ord899
ord1416
ord3678
ord896
ord772
ord283
ord860
ord5710
ord3756
ord741
ord2713
ord5711
ord501
ord563
ord709
ord753
ord1006
ord530
ord722
ord557
ord745
ord6001
ord6002
ord2362
ord1472
ord894
ord4884
ord6063
ord6700
ord1939
ord2121
ord282
ord1894
ord1479
ord3990
ord591
ord1785
ord3635
ord4119
ord3165
ord2159
ord4228
ord1538
ord3435
ord2080
ord4092
ord1474
ord1922
ord2311
ord2651
ord3286
ord1925
ord1572
ord1634
ord3204
ord6086
ord3922
ord3157
ord4314
ord5727
ord1271
ord4098
ord1396
ord715
ord763
ord3982
ord2154
ord5827
ord1605
ord5828
ord3902
ord3198
ord2137
ord1303
ord1311
ord5311
ord6715
ord1718
ord6716
ord4451
ord1600
ord6726
ord5156
ord5137
ord6099
ord1619
ord1620
ord3913
ord3163
ord2936
ord1604
ord1603
ord454
ord3914
ord1941
ord686
ord2648
ord2049
ord3903
ord5943
ord2461
ord3900
ord3108
ord5940
ord5567
ord3393
ord2712
ord765
ord4108
ord4111
ord6062
ord3754
ord2647
ord5798
ord4118
ord6060
ord6085
ord3189
ord620
ord2155
ord3755
ord1058
ord4743
ord444
ord677
ord5609
ord6061
ord4112
ord998
ord2264
ord3614
ord314
ord6751
ord2241
ord2244
ord2243
ord3590
ord265
ord4574
ord2011
ord1662
ord1661
ord1542
ord6720
ord5908
ord1392
ord4238
ord5199
ord2942
ord4256
ord3176
ord2392
ord2390
ord2407
ord2402
ord587
ord2386
ord2409
ord2397
ord572
ord2379
ord760
ord2381
ord2399
ord2169
ord2163
ord1513
ord6273
ord3796
ord6275
ord3339
ord4961
ord1353
ord5171
ord1955
ord1647
ord1646
ord1590
ord5196
ord2077
ord2856
ord1536
ord2985
ord6721
ord4480
ord5911
ord1611
ord3158
ord1608
ord3940
ord1393
ord4226
ord5148
ord1899
ord5067
ord6271
ord4179
ord5210
ord3397
ord4716
ord2366
ord4276
ord1591
ord5956
ord5231
ord5229
ord920
ord925
ord929
ord927
ord931
ord2384
ord2404
ord2388
ord2394
ord4032
ord4008
ord6272
ord3795
ord6274
ord757
ord4320
ord566
ord2054
ord2009
ord5579
ord3800
ord1007
ord1118
ord3677
ord5096
ord4535
ord6215
ord5378
ord776
ord3826
ord1911
ord2925
ord5220
ord5222
ord3942
ord4562
ord5226
ord5209
ord5562
ord2531
ord577
ord2725
ord2829
ord4301
ord2708
ord2832
ord2534
ord293
ord2640
ord2527
ord3712
ord3713
ord3703
ord2638
ord3943
ord4475
ord4255
ord3327
ord762
ord2239
ord5971
ord1049
ord3824
ord764
ord4347
ord1198
_time64
strcpy_s
sprintf_s
_beginthreadex
memcpy_s
swprintf_s
wcsncmp
strncmp
_vscprintf
_vscwprintf
_localtime64
printf
memmove_s
_CxxThrowException
wcsncpy_s
_swprintf
wcscpy_s
_vswprintf
calloc
free
_purecall
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
_invalid_parameter_noinfo
_vsnwprintf
malloc
rand
srand
_wtoi64
wcscat_s
_strlwr
_itow
strcat
strcpy
strlen
vswprintf_s
vsprintf_s
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
TerminateProcess
CreateDirectoryA
CreateFileA
GlobalMemoryStatusEx
SetFilePointer
ReadFile
GetVolumeNameForVolumeMountPointW
DeleteVolumeMountPointW
SetVolumeMountPointW
FlushFileBuffers
DeviceIoControl
WriteFile
GetLocalTime
GetSystemInfo
AllocConsole
GetVersionExA
CreateFileW
WriteConsoleW
GetStdHandle
GetFileSizeEx
SetFilePointerEx
MultiByteToWideChar
IsBadWritePtr
DeleteFileW
CreateDirectoryW
GetSystemWow64DirectoryW
OutputDebugStringW
OutputDebugStringA
IsBadReadPtr
GetTickCount
MapViewOfFile
GetCurrentProcess
CreateThread
GetPrivateProfileStringA
Sleep
GetModuleFileNameA
GetSystemDirectoryW
GetWindowsDirectoryW
lstrcpyW
WideCharToMultiByte
lstrlenW
WinExec
FreeLibrary
LoadLibraryW
GetLastError
CreateMutexW
CloseHandle
WaitForSingleObject
CreateProcessW
CopyFileW
GetModuleFileNameW
GetSystemWindowsDirectoryW
GetVersionExW
GetModuleHandleW
GetProcAddress
UnmapViewOfFile
GetExitCodeProcess
TerminateThread
LoadLibraryA
SystemTimeToFileTime
VirtualFree
VirtualAlloc
SetFileAttributesW
LocalFree
IsBadCodePtr
QueryDosDeviceW
SetLastError
GetLogicalDrives
FindFirstFileW
FindClose
FindNextFileW
RemoveDirectoryW
DefineDosDeviceW
GetVolumeInformationW
GetDiskFreeSpaceW
GetSystemTime
SetVolumeLabelW
GetComputerNameW
GetCurrentThread
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrlenA
GetFileSize
FindResourceExW
FindResourceW
SizeofResource
LoadResource
LockResource
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
OpenEventW
OpenFileMappingW
CreatePipe
SetEvent
GetACP
GetLocaleInfoA
GetThreadLocale
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetFileAttributesW
SetHandleInformation
LoadImageW
GetIconInfo
DestroyIcon
GetPropW
DefWindowProcW
CallWindowProcW
GetMessageW
TranslateMessage
DispatchMessageW
CreateDialogParamW
SetParent
RemovePropW
RegisterClassW
ScreenToClient
CreateWindowExW
ReleaseDC
TrackMouseEvent
IsWindowEnabled
PostMessageW
SetWindowPos
IsDlgButtonChecked
GetDlgCtrlID
SetScrollInfo
ShowWindow
GetWindowLongW
SetPropW
FindWindowW
SystemParametersInfoW
GetScrollInfo
UnregisterClassA
MoveWindow
SetWindowRgn
OffsetRect
IsZoomed
DrawIconEx
DrawTextW
GetKeyState
GetAsyncKeyState
UpdateWindow
EnumDisplaySettingsW
DrawIcon
GetSystemMetrics
IsIconic
LoadIconW
ChangeDisplaySettingsW
GetWindowDC
SetTimer
SetWindowTextW
GetWindowTextW
ExitWindowsEx
InvalidateRect
GetWindowRect
SetCursor
RedrawWindow
GetClientRect
IsWindowVisible
FillRect
GetSysColor
IsWindow
PtInRect
DestroyCursor
GetCursorPos
CopyIcon
LoadCursorW
SetWindowLongW
SendMessageW
EnableWindow
GetParent
MessageBoxW
ClientToScreen
ReleaseCapture
SetCapture
wsprintfW
DeleteObject
DeleteDC
SetTextColor
SetBkMode
CreateSolidBrush
MoveToEx
SetBkColor
SetTextJustification
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetCurrentObject
BitBlt
GetObjectW
TextOutW
GetStockObject
CreateFontIndirectW
LineTo
GetTextExtentPoint32W
GetTextMetricsW
CreateFontW
ExtTextOutW
GetGlyphOutlineW
CreateRectRgn
CreatePen
ExcludeClipRect
GetOpenFileNameW
RegSetKeySecurity
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegQueryInfoKeyW
RegSetValueExW
RegGetKeySecurity
RegDeleteKeyW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertStringSidToSidW
SetSecurityInfo
RegFlushKey
SetEntriesInAclW
SetNamedSecurityInfoW
BuildExplicitAccessWithNameW
RegSaveKeyW
RegQueryValueW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegUnLoadKeyW
RegLoadKeyW
RegOpenKeyW
RegQueryValueExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
ShellExecuteW
SHGetFolderPathW
SHAppBarMessage
_TrackMouseEvent
InitCommonControlsEx
PathFileExistsW
CoCreateGuid
VariantInit
??0?$allocator@_W@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
?max_size@?$allocator@_W@std@@QBEIXZ
??0?$allocator@_W@std@@QAE@ABV01@@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@0@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_W@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHABV12@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
UuidCreate
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpReceiveResponse
WinHttpSetOption
WinHttpOpen
WinHttpCloseHandle
WinHttpWriteData
WinHttpConnect
WinHttpSendRequest
GetObjGAHelp
GetObjGoogleAnalytics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE