Function1
Function2
Function3
Function4
Static task
static1
Behavioral task
behavioral1
Sample
69d71c43b04f59f718b468ce22c8a0aa6bde6e5fd92901acc5e7e2952c1b7247.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
69d71c43b04f59f718b468ce22c8a0aa6bde6e5fd92901acc5e7e2952c1b7247.dll
Resource
win10v2004-20230703-en
Target
69d71c43b04f59f718b468ce22c8a0aa6bde6e5fd92901acc5e7e2952c1b7247
Size
2.3MB
MD5
f36bc109ca21abd3d5b8a6ef454b3ab8
SHA1
b3290508a742087d1d0c8fb5fdd2643210bce589
SHA256
69d71c43b04f59f718b468ce22c8a0aa6bde6e5fd92901acc5e7e2952c1b7247
SHA512
8d4c05abb3645362d8cfca13f9f98467b44be69eaf77b7cc9302a00fa816ff08727e0f2e2be0702544d98d8d5330344514a6d66b1fc98a62356af67624a25d45
SSDEEP
49152:U6s2LO7A0hBTiBb47NdDGg7IHnuM63Xw74k8UgtrrbVlN5nbqH9NDjn:3O7PTWM7NdD7UOMtglvrbqd1jn
Checks for missing Authenticode signature.
resource |
---|
69d71c43b04f59f718b468ce22c8a0aa6bde6e5fd92901acc5e7e2952c1b7247 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrIW
PathFileExistsW
WinExec
GetCurrentProcessId
ResumeThread
GetLocalTime
GetCurrentThreadId
LoadLibraryW
GetProcAddress
WaitForSingleObject
GetModuleHandleW
SetLastError
HeapAlloc
HeapFree
GetProcessHeap
LocalFree
GetEnvironmentVariableW
OutputDebugStringW
WriteConsoleW
QueueUserAPC
FlushFileBuffers
GetModuleFileNameW
TerminateProcess
CopyFileW
Sleep
WriteFile
GetCurrentProcess
CreateProcessW
SetFilePointer
GetCommandLineW
CloseHandle
GetLastError
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetStdHandle
GetOEMCP
IsValidCodePage
HeapSize
GetModuleHandleExW
ExitProcess
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
GetACP
FindFirstFileW
GetFileAttributesExW
InitializeCriticalSection
CreateMutexW
ReleaseMutex
LoadLibraryExW
InterlockedExchangeAdd
GetFileAttributesW
GetFullPathNameW
CreateDirectoryW
lstrlenW
FindClose
GetFileSize
ReadFile
InitializeCriticalSectionAndSpinCount
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
HeapReAlloc
RaiseException
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
LCMapStringW
GetSystemTimeAsFileTime
GetLastError
GetCurrentProcessId
LoadLibraryA
FreeLibrary
TerminateProcess
GetCurrentProcess
GetSystemInfo
CreateToolhelp32Snapshot
Thread32First
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
GetTickCount
GlobalFree
GetProcAddress
GetModuleFileNameW
LocalFree
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
FlushFileBuffers
CreateEventA
GetModuleHandleA
GetSystemTimeAsFileTime
LocalAlloc
VirtualQuery
CreateFileA
WriteConsoleW
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetSpecialFolderPathW
CommandLineToArgvW
WTSSendMessageW
CharUpperBuffW
MessageBoxW
QueryServiceConfigW
OpenServiceW
EnumServicesStatusExW
OpenSCManagerW
CloseServiceHandle
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
Function1
Function2
Function3
Function4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ