execute
kill
version
Static task
static1
Behavioral task
behavioral1
Sample
1c9b52356fcf36eadb9b26dc362ab9c993371aeccf424ba6831871770bb36a90.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1c9b52356fcf36eadb9b26dc362ab9c993371aeccf424ba6831871770bb36a90.dll
Resource
win10v2004-20230824-en
Target
1c9b52356fcf36eadb9b26dc362ab9c993371aeccf424ba6831871770bb36a90
Size
828KB
MD5
0659204ee20fef476c7481fc643e99df
SHA1
f7cd14631c79bf8c65794d1b1e555da926609346
SHA256
1c9b52356fcf36eadb9b26dc362ab9c993371aeccf424ba6831871770bb36a90
SHA512
c1082de4e6e4e9089f943c096521f49986488c61ce2cde4d056c6d58c3699bed211aacff3bb59f88d3177dbc29a9318f83bc97e3210c5d92bb7f0e66cac4c56f
SSDEEP
12288:ddkthnyTFme/wJlapBq2LUXthlPsJRD4Z1LNiseZaUs1l2f28sS:Dk+TFmUwJkrqt9hlPs4Z1xisekus
Checks for missing Authenticode signature.
resource |
---|
1c9b52356fcf36eadb9b26dc362ab9c993371aeccf424ba6831871770bb36a90 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OutputDebugStringW
RaiseException
GetWindowsDirectoryA
GetLogicalDrives
LoadLibraryExW
MulDiv
LoadResource
GlobalFree
GlobalAlloc
LockResource
FreeResource
FindResourceA
WriteFile
SizeofResource
SetUnhandledExceptionFilter
GetCurrentThreadId
GetFileSize
CreateFileA
GetModuleHandleA
GetDiskFreeSpaceA
OpenProcess
GetVolumeInformationA
SetErrorMode
GetDriveTypeA
GetCurrentProcess
GetModuleFileNameA
GlobalUnlock
FormatMessageA
ReadFile
LocalFree
GlobalLock
GetLastError
lstrlenA
CreateDirectoryA
GetTempFileNameA
GetLongPathNameA
DecodePointer
GetTempPathA
SetCurrentDirectoryA
GetCurrentDirectoryA
FindClose
InitializeCriticalSectionEx
OpenFile
GetFullPathNameA
FindNextFileA
FindFirstFileA
GetFileAttributesExA
CompareFileTime
GetExitCodeProcess
FlushFileBuffers
GenerateConsoleCtrlEvent
GetTickCount
CreateProcessA
GetProcessHeap
GetPriorityClass
SetStdHandle
HeapAlloc
DeleteProcThreadAttributeList
CreateThread
ReleaseSRWLockExclusive
UpdateProcThreadAttribute
Sleep
DuplicateHandle
ResumeThread
WaitForSingleObject
PeekNamedPipe
CreatePipe
SetThreadPriority
InitializeProcThreadAttributeList
TryAcquireSRWLockExclusive
GetStdHandle
HeapFree
CreateNamedPipeA
SetHandleInformation
GetCurrentThread
GetDateFormatA
GetUserDefaultLCID
GetFinalPathNameByHandleA
GetTimeFormatA
ExpandEnvironmentStringsA
GlobalHandle
AddVectoredExceptionHandler
SetFilePointer
WritePrivateProfileSectionA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileSectionA
SetEnvironmentVariableA
GetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
DebugBreak
VerifyVersionInfoW
FreeLibrary
VerSetConditionMask
GetProcAddress
GetLocalTime
CloseHandle
GetVersionExA
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
CompareStringA
GetLocaleInfoA
CloseClipboard
CharUpperBuffA
CharUpperA
OemToCharA
CharToOemA
GetAsyncKeyState
RemovePropA
SetPropA
GetCapture
GetPropA
PtInRect
GetMessageTime
TrackMouseEvent
GetMenuItemRect
MenuItemFromPoint
DrawFocusRect
SetDlgItemTextA
GetClassInfoExA
DestroyIcon
BringWindowToTop
SetClassLongA
RegisterClassExA
ChildWindowFromPoint
CreateWindowExA
GetKeyboardLayout
MessageBeep
GetClipboardData
PostQuitMessage
MessageBoxA
IsIconic
SetForegroundWindow
CharLowerA
SetCursor
SetCapture
TranslateMessage
SetFocus
UnhookWindowsHookEx
GetForegroundWindow
AttachThreadInput
LoadAcceleratorsA
GetWindowTextA
TranslateAcceleratorA
RegisterWindowMessageA
GetKeyboardState
WaitMessage
CallNextHookEx
PostMessageA
SetActiveWindow
keybd_event
SetWindowPos
LoadCursorA
DispatchMessageA
GetMessageW
GetWindowThreadProcessId
SendInput
GetCursorPos
ReleaseDC
DdeFreeStringHandle
DdeInitializeA
DdeDisconnect
KillTimer
ShowCaret
LoadIconA
EndDeferWindowPos
OpenClipboard
ReleaseCapture
IsClipboardFormatAvailable
IsCharAlphaNumericA
PeekMessageA
GetMessagePos
LoadStringA
GetSystemMetrics
DestroyCaret
DdeClientTransaction
DdeUninitialize
LoadBitmapA
GetWindowLongA
MapWindowPoints
CreateCaret
ClientToScreen
DdeCreateStringHandleA
DdeGetLastError
DdeConnect
SetTimer
BeginDeferWindowPos
UnregisterClassA
GetMessageA
SetCaretPos
GetClassNameA
ScreenToClient
HideCaret
EnumChildWindows
GetMenuItemCount
GetCaretPos
GetDC
LoadImageA
GetKeyState
DeferWindowPos
EnableWindow
InvalidateRect
UpdateWindow
GetWindowTextLengthA
GetDlgItem
IsZoomed
GetClientRect
SetParent
DragDetect
LoadMenuA
GetMenuItemID
InsertMenuA
DeleteMenu
CreatePopupMenu
TrackPopupMenu
GetSubMenu
SetMenuItemInfoA
SetMenu
DestroyMenu
AppendMenuA
RemoveMenu
CheckMenuItem
EnableMenuItem
GetMenuItemInfoA
GetMenuStringA
CreateMenu
ModifyMenuA
SetWindowsHookExA
GetMenuItemInfoW
GetMenuBarInfo
GetSysColor
GetWindowDC
GetParent
TabbedTextOutW
FillRect
DrawIcon
DrawTextA
FrameRect
TabbedTextOutA
DrawTextW
DrawEdge
BeginPaint
EndPaint
SendDlgItemMessageA
GetWindowPlacement
OffsetRect
IntersectRect
SystemParametersInfoA
IsWindowVisible
EndDialog
DialogBoxParamA
IsDialogMessageA
DrawMenuBar
CreateDialogParamA
AdjustWindowRectEx
GetWindowRect
GetFocus
DestroyWindow
wsprintfA
ShowWindow
IsWindow
GetDlgItemTextA
RedrawWindow
PostThreadMessageA
SetWindowLongA
CallWindowProcA
SetWindowPlacement
ValidateRect
SetWindowTextA
IsWindowEnabled
DefWindowProcA
SendMessageA
DeleteObject
SetBkColor
SetDIBits
DeleteDC
CreateBitmap
GetDIBits
GetStockObject
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
GetClipBox
GetDCOrgEx
RoundRect
GetTextMetricsA
CreateDCA
GetObjectA
RestoreDC
SetStretchBltMode
CombineRgn
CreateRectRgn
Ellipse
Polyline
CreateFontIndirectA
ExtCreatePen
EnumFontFamiliesA
SetBrushOrgEx
SetBkMode
CreateSolidBrush
GetBkColor
SaveDC
ExtTextOutA
GetTextExtentPoint32A
PatBlt
StretchBlt
PaintRgn
SetWindowOrgEx
GetWindowOrgEx
GetDeviceCaps
TextOutW
GetTextExtentPoint32W
SetTextColor
TextOutA
LineTo
Rectangle
SelectClipRgn
GetTextColor
ExcludeClipRect
MoveToEx
ChooseColorA
PrintDlgA
ChooseFontA
OpenProcessToken
GetUserNameA
RegEnumValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
MapGenericMask
DuplicateToken
AccessCheck
GetFileSecurityA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHGetSpecialFolderPathA
ShellExecuteExA
CoInitialize
OleUninitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CoCreateInstance
CoUninitialize
OleInitialize
VariantClear
SysFreeString
VariantInit
GetErrorInfo
CreateErrorInfo
VariantChangeType
SysAllocString
SetErrorInfo
DrawThemeTextEx
SetWindowTheme
OpenThemeData
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?gcount@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QBE_JXZ
?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBE_JXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?_Xlength_error@std@@YAXPBD@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
?bad@ios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
?eof@ios_base@std@@QBE_NXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
strstr
__current_exception_context
memcpy
__CxxFrameHandler3
__std_exception_copy
_setjmp3
strchr
__std_type_info_destroy_list
_except_handler4_common
strrchr
__current_exception
longjmp
memset
_CxxThrowException
memmove
_purecall
_seh_longjmp_unwind4
__std_terminate
__std_exception_destroy
_strnicmp
_strrev
_stricmp
islower
strncpy
isalpha
tolower
isupper
toupper
_strdup
strncpy_s
_memicmp
isxdigit
strpbrk
isalnum
isdigit
strncmp
_ecvt_s
strtol
atoi
strtoul
_itoa
atol
strtod
mbstowcs
wcstombs
atof
_errno
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_set_invalid_parameter_handler
_invalid_parameter_noinfo
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn
fread
_fseeki64
fopen_s
__stdio_common_vsprintf_s
getc
fopen
__acrt_iob_func
__stdio_common_vfprintf
_ftelli64
fwrite
__stdio_common_vsnprintf_s
fclose
_wfopen_s
_get_stream_buffer_pointers
fflush
fsetpos
ungetc
setvbuf
fgetpos
_getcwd
fgetc
ferror
_write
fputc
__stdio_common_vsprintf
_finite
ceil
_except1
_isnan
floor
_CIfmod
_callnewh
malloc
_recalloc
free
srand
qsort
_ctime64
_time64
ImageList_DrawEx
InitCommonControlsEx
ImageList_AddMasked
ImageList_Draw
ImageList_GetIcon
ImageList_Destroy
ImageList_Create
UrlCreateFromPathA
remove
_chdrive
_chmod
_lock_file
_chdir
_unlock_file
_stat64i32
execute
kill
version
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ