capi_GetCurrentAppVersion
capi_GetPushStreamUrl
capi_GetSupportAppVersion
Static task
static1
Behavioral task
behavioral1
Sample
3f8bc4e1145a7b456707a3e5dfcc3e39c4a94b19ede921220872adef6efd98fc.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3f8bc4e1145a7b456707a3e5dfcc3e39c4a94b19ede921220872adef6efd98fc.dll
Resource
win10v2004-20230703-en
Target
3f8bc4e1145a7b456707a3e5dfcc3e39c4a94b19ede921220872adef6efd98fc
Size
382KB
MD5
56949468f04cb1c677a1491912c6acf4
SHA1
41e10ed21dd5f87907ec77bcb693893d33a61263
SHA256
3f8bc4e1145a7b456707a3e5dfcc3e39c4a94b19ede921220872adef6efd98fc
SHA512
863fc427c0e9ea9c9e53b2daa044cb992ee5e6a5433b78a088d9c13a621864c2c0dde7900ae0f56769bdcb448c53ed0f59fb95d235e8a1573cbeef4a6bddf1e2
SSDEEP
6144:HUaEqXGMXHI/qZa3HEqIW0TGa+FV4gl5AOMOYYXbbM3N:0an/oSZa3HEqImFliOfbyN
Checks for missing Authenticode signature.
resource |
---|
3f8bc4e1145a7b456707a3e5dfcc3e39c4a94b19ede921220872adef6efd98fc |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OpenProcess
CreateToolhelp32Snapshot
MultiByteToWideChar
GetLastError
Process32NextW
GetCurrentThread
TerminateThread
Process32FirstW
CloseHandle
GetNativeSystemInfo
VirtualProtectEx
GetProcAddress
VirtualAllocEx
ReadProcessMemory
GetCurrentProcessId
GetModuleHandleW
WideCharToMultiByte
VirtualFreeEx
IsWow64Process
VirtualQueryEx
WaitForSingleObject
VirtualAlloc
GetCurrentProcess
VirtualFree
WriteProcessMemory
WriteConsoleW
HeapSize
CreateFileW
GetProcessHeap
FreeEnvironmentStringsW
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
QueryPerformanceCounter
LCMapStringEx
GetSystemTimeAsFileTime
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
GetStdHandle
GetFileType
HeapAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapFree
SetStdHandle
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
ReadFile
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
SetEndOfFile
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
OpenProcessToken
RegOpenKeyExW
OpenThreadToken
RegQueryValueExW
SHGetSpecialFolderPathW
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
capi_GetCurrentAppVersion
capi_GetPushStreamUrl
capi_GetSupportAppVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ