CustomFunction
CustomFunctionHub
CustomFunctionM
CustomFunctionT
GetWindows
Static task
static1
Behavioral task
behavioral1
Sample
64339fd0047b0f6e48253b1e2843f5cf0d8533bc39dbcce589481e32594745d4.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
64339fd0047b0f6e48253b1e2843f5cf0d8533bc39dbcce589481e32594745d4.dll
Resource
win10v2004-20230831-en
Target
64339fd0047b0f6e48253b1e2843f5cf0d8533bc39dbcce589481e32594745d4
Size
428KB
MD5
383b37785ae0c0674734a8abcbf76bb6
SHA1
e89b009ba87f82830f1b418aaeebf69d103502dc
SHA256
64339fd0047b0f6e48253b1e2843f5cf0d8533bc39dbcce589481e32594745d4
SHA512
41d5e1508cb0672c5f575dcc81ed100ecd8662b2a4e304363fc6d5be9cfa98cda854814fcf8ea1b63c665722300be0495253b517c186aeb02a5a5663b0d68fe9
SSDEEP
12288:lhbFHinhn9nyn/nGn7R4GlaDWdmGdanIntnZnSK:lhbFHjGlaGmGdIK
Checks for missing Authenticode signature.
resource |
---|
64339fd0047b0f6e48253b1e2843f5cf0d8533bc39dbcce589481e32594745d4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
GetLastError
QueueUserAPC
TerminateThread
ResumeThread
WaitForSingleObject
SuspendThread
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
WriteFile
CreateFileA
MoveFileA
CreateDirectoryA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
CreateThread
RtlMoveMemory
GetModuleHandleA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
SetUnhandledExceptionFilter
CloseHandle
LocalFree
LocalAlloc
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
SetFilePointer
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
IsBadWritePtr
VirtualAlloc
OpenProcess
GetCurrentProcess
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetVersion
RtlUnwind
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
SetWindowsHookExA
UnhookWindowsHookEx
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
IsWindow
PostMessageA
SetWindowPos
FindWindowA
SendMessageA
GetWindowTextA
MsgWaitForMultipleObjects
CallNextHookEx
SendMessageTimeoutA
GetTokenInformation
OpenProcessToken
PathFindExtensionA
PathFindFileNameA
WinHttpCheckPlatform
WinHttpOpen
WinHttpConnect
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpSetOption
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpCrackUrl
ShellExecuteA
CustomFunction
CustomFunctionHub
CustomFunctionM
CustomFunctionT
GetWindows
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ