GetPropertiesInfo
GetStatus
SetPropertiesInfo
SetStatus
Static task
static1
Behavioral task
behavioral1
Sample
sample.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
sample.dll
Resource
win10v2004-20230703-en
Target
cdcb5144c36c3aee7604fbafa191c51475ff11eaf7e2fba1bdf4f836edc4cda5.bin.sample.gz
Size
82KB
MD5
36fa937490b51b9ebcac9d2f2847f8ae
SHA1
189668b0ed435ca9e86395940e444cc56d3d4565
SHA256
c58553090ddd5db498ff18c2f5b2329052bfd67168d825de45e7fdda40a0e2f6
SHA512
74aa91d8baf40d605611d74d73241acd684c2e92233a1095441724e8a347d47940d600de1833c873748643cc1bc4916c7cd7d4909ae2e76706f838a5505e816c
SSDEEP
1536:M6AgJQUr8GB/0aCwi3aEpmj7zPQ+3HoE0fVPHmvsaz7FddFGA/f68P+:M6s288/0aM3aE67b7na+vsw7FddQG6++
Checks for missing Authenticode signature.
resource |
---|
unpack001/sample |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CloseHandle
GetLastError
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryW
Sleep
VirtualProtect
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
OutputDebugStringA
GetPrivateProfileStringW
lstrlenA
GetVersionExW
OpenProcess
FreeLibrary
GetModuleHandleA
Process32NextW
Process32FirstW
GetProcAddress
GetExitCodeProcess
CreateProcessW
MultiByteToWideChar
lstrlenW
ReleaseMutex
TerminateThread
GetCurrentThreadId
SetLastError
ReadFile
GetSystemTimeAsFileTime
SetEndOfFile
CreateMutexW
GetSystemTime
DeleteFileW
OpenEventW
WaitForMultipleObjects
CreateEventW
MoveFileW
CreateFileW
GetFileAttributesW
CopyFileW
WriteFile
SetEvent
WaitForSingleObject
MoveFileExW
SetFilePointer
GetFileSize
ExpandEnvironmentStringsW
??1type_info@@UEAA@XZ
_amsg_exit
_initterm
malloc
_XcptFilter
_onexit
_lock
__dllonexit
_unlock
_CxxThrowException
__C_specific_handler
_vsnwprintf
_wtoi
memcpy
free
wcstombs
_beginthreadex
_i64toa
strncpy
_isatty
_write
srand
rand
wcscmp
wcsstr
wcslen
wcsncat
wcsncpy
??2@YAPEAX_K@Z
wcscpy
??3@YAXPEAX@Z
strlen
_beginthread
_wcslwr
_errno
__CxxFrameHandler
_lseeki64
_fileno
__pioinfo
isleadbyte
_iob
_snprintf
_itoa
wctomb
strcat
memset
__badioinfo
_wcsicmp
MessageBoxA
CryptReleaseContext
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegQueryValueExW
QueryServiceStatus
RegDeleteValueW
RevertToSelf
OpenProcessToken
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptAcquireContextA
SetSecurityInfo
CryptGetHashParam
RegCreateKeyExW
RegSetValueExW
RegCloseKey
QueryServiceConfigW
RegOpenKeyExW
PathIsNetworkPathW
StrCmpIW
StrStrIW
WSAStartup
WSACleanup
HttpOpenRequestW
HttpQueryInfoW
HttpAddRequestHeadersW
InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
InternetQueryDataAvailable
InternetQueryOptionW
InternetOpenW
InternetCloseHandle
ExpandEnvironmentStringsForUserW
GetPropertiesInfo
GetStatus
SetPropertiesInfo
SetStatus
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ