DestroyObj
GetOlImeObj
OnComponentStartup
Static task
static1
Behavioral task
behavioral1
Sample
d0fae7cfcf61100f663861e3a2ad09ab93a5c6264e655f9c1866915a6cd2df4c.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d0fae7cfcf61100f663861e3a2ad09ab93a5c6264e655f9c1866915a6cd2df4c.dll
Resource
win10v2004-20230831-en
Target
d0fae7cfcf61100f663861e3a2ad09ab93a5c6264e655f9c1866915a6cd2df4c
Size
2.3MB
MD5
546d89bee2b5c069c6e5b098a99e249f
SHA1
691755ee91e2ac5739cab399f8d0330929b0748b
SHA256
d0fae7cfcf61100f663861e3a2ad09ab93a5c6264e655f9c1866915a6cd2df4c
SHA512
f19fea7f1044a80c584ac41beb2a364263a85c81d71efcee6484cef2208bcd7de8af9c587bce0be15b1a4f25729cc34e2f887ce1e81c770064a510ac22c9003e
SSDEEP
49152:zhkwYbi+7h5mBxdFyWjwSBqWgXDFgm/bTM6bb80zr/PRIUk:1kwH+7h5mBxxjwSB5gXJx3M6br
Checks for missing Authenticode signature.
resource |
---|
d0fae7cfcf61100f663861e3a2ad09ab93a5c6264e655f9c1866915a6cd2df4c |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetConfigureInst
ReleaseConfigInst
FindClose
SetFileTime
GetSystemTime
SystemTimeToFileTime
FindFirstFileW
FindNextFileW
TerminateThread
GetExitCodeThread
ReleaseSemaphore
GetFileSize
ReadFile
CreateSemaphoreW
MoveFileW
GetTempPathW
CreateDirectoryW
GetFileAttributesW
InterlockedExchangeAdd
HeapCreate
DecodePointer
RaiseException
CreateFileMappingA
CreateFileA
WaitForMultipleObjects
ExpandEnvironmentStringsW
OutputDebugStringW
GetLocalTime
LocalFree
WritePrivateProfileStringW
RemoveDirectoryW
MoveFileExW
QueryPerformanceCounter
SetFileAttributesW
GetCurrentProcess
GetCurrentDirectoryW
LocalFileTimeToFileTime
QueryPerformanceFrequency
InterlockedPopEntrySList
InitializeSListHead
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringW
FindResourceExW
FindResourceW
SizeofResource
LoadResource
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
LockResource
SetCriticalSectionSpinCount
CreateFileMappingW
UnmapViewOfFile
FlushViewOfFile
SetFilePointer
SetEndOfFile
GetFileSizeEx
lstrcmpW
GetVersionExW
OpenFileMappingW
MapViewOfFile
ProcessIdToSessionId
DeleteFileW
CreateFileW
GetPrivateProfileIntW
GetCommandLineW
GetModuleHandleExW
GetModuleHandleW
GetModuleFileNameW
CreateEventW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetNamedPipeHandleState
GetTickCount
GetSystemTimeAsFileTime
CloseHandle
WriteFile
Sleep
WaitForSingleObject
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetLastError
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetProcAddress
InterlockedCompareExchange
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
ResetEvent
FlushInstructionCache
IsProcessorFeaturePresent
EncodePointer
IsDebuggerPresent
InterlockedPushEntrySList
VirtualAlloc
VirtualFree
CallWindowProcW
RegisterClassExW
LoadCursorW
SetTimer
PeekMessageW
DefWindowProcW
PostMessageW
DestroyWindow
CreateWindowExW
GetWindowLongW
SetWindowLongW
GetMessageW
DispatchMessageW
UnregisterClassW
IsWindow
GetClassInfoExW
TranslateMessage
KillTimer
IsTextUnicode
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ConvertStringSidToSidW
RegSetKeySecurity
RegGetKeySecurity
RegCreateKeyExW
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
RegSetValueExW
GetSecurityDescriptorDacl
RegOpenKeyExW
SetEntriesInAclW
RegQueryValueExW
SHGetFolderPathW
ord165
CoTaskMemFree
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??0_Container_base12@std@@QAE@XZ
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
_Wcscoll
_Wcsxfrm
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??Bid@locale@std@@QAEIXZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
?eof@ios_base@std@@QBE_NXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?peek@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?_Xbad_function_call@std@@YAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?_BADOFF@std@@3_JB
?_1@placeholders@std@@3V?$_Ph@$00@2@A
?_2@placeholders@std@@3V?$_Ph@$01@2@A
?_3@placeholders@std@@3V?$_Ph@$02@2@A
?_4@placeholders@std@@3V?$_Ph@$03@2@A
?uncaught_exception@std@@YA_NXZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?fail@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Winerror_map@std@@YAPBDH@Z
_Inf
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
_Nan
PathFileExistsW
StrChrW
StrStrIW
ImmDisableIME
_libm_sse2_pow_precise
_snwprintf_s
strtok_s
__clean_type_info_names_internal
_malloc_crt
_initterm_e
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
vsprintf_s
_vsnwprintf
free
malloc
memcpy_s
memmove
wcscpy_s
wcsrchr
_wcsicmp
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??_V@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
_CxxThrowException
__CxxFrameHandler3
__RTDynamicCast
memcpy
memset
atoi
_stricmp
wmemcpy_s
isupper
tolower
_wtol
fclose
fread
fseek
ftell
rewind
_wfopen_s
_wremove
_wtoi
realloc
memchr
strchr
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
_vscprintf
vswprintf_s
_vscwprintf
memmove_s
wcsnlen
isspace
wcsncmp
fgetws
wcschr
wcsstr
_wcsnicmp
toupper
_ctime64_s
isalpha
_fsopen
??0exception@std@@QAE@XZ
fwrite
sprintf_s
_itoa_s
strncmp
_strnicmp
_waccess
_beginthreadex
_libm_sse2_log_precise
strcpy_s
fputwc
fputws
_errno
_time64
_i64tow_s
_wcsnicmp_l
_waccess_s
_wrename
_libm_sse2_exp_precise
_libm_sse2_sqrt_precise
feof
fgetwc
ungetwc
fwprintf
wcscat_s
wcscspn
_localtime64_s
fopen_s
fprintf
fputs
remove
strcat_s
fwprintf_s
swprintf_s
_atoi64
_wtoi64
wcsncpy_s
_isnan
_wstat64i32
modf
strtod
_finite
_fpclass
_CIfmod
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_log10_precise
_amsg_exit
_libm_sse2_sin_precise
_libm_sse2_tan_precise
atof
isdigit
strncpy_s
?terminate@@YAXXZ
_access
sscanf
localeconv
_dtest
rand
srand
isalnum
_itow_s
strtol
strtoul
_strtoi64
??8type_info@@QBE_NABV0@@Z
calloc
iswspace
_recalloc
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_except1
_except_handler4_common
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CppXcptFilter
_initterm
?GetZXRes@BDZX@BDCloud@@YAJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$function@$$A6AXHHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@K@Z@4@PAHH@Z
?Uninit@BDZX@BDCloud@@YAXXZ
?Init@BDZX@BDCloud@@YAXXZ
sendto
setsockopt
ntohs
getsockname
WSAGetLastError
htons
socket
WSAStartup
WSACleanup
closesocket
recvfrom
getaddrinfo
freeaddrinfo
bind
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
?ReleaseNetManager@basic_net@@YAHPAVINetManager@1@@Z
?GetNetManager@basic_net@@YAPAVINetManager@1@H@Z
DestroyObj
GetOlImeObj
OnComponentStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ