??4_Init_locks@std@@QAEAAV01@ABV01@@Z
strdup
Static task
static1
Behavioral task
behavioral1
Sample
9cc2840b1993c946cd9b9c30d5c1018d39a2d2beda38bf48b206d59b88cb5a5b.exe
Resource
win7-20230831-en
Target
9cc2840b1993c946cd9b9c30d5c1018d39a2d2beda38bf48b206d59b88cb5a5b
Size
1007KB
MD5
3e4d23d14d14df8321a88eec334e1f18
SHA1
92eb818356d90c46b66e9da2d5fe62a220d2ba4e
SHA256
9cc2840b1993c946cd9b9c30d5c1018d39a2d2beda38bf48b206d59b88cb5a5b
SHA512
340b41331a01feed28ff3602c995e7d87cfd62ddada414630e9b15cfbc8e2b5c18690551adcb0199a28c5dc09107bbedd143ee77ad2262ac10130d9abee7fff4
SSDEEP
24576:UOIrU52FtAdEsaJb6YjduKQ0Jf+ThQELCJl:56U52FtDZE8kKj2NQELEl
Checks for missing Authenticode signature.
resource |
---|
9cc2840b1993c946cd9b9c30d5c1018d39a2d2beda38bf48b206d59b88cb5a5b |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ord17
_TrackMouseEvent
InitCommonControlsEx
SetFileTime
CreateDirectoryW
GetProcAddress
FormatMessageA
GetCurrentThreadId
CreateMutexW
GetLastError
OpenProcess
GetCurrentDirectoryW
WaitForSingleObject
CloseHandle
Sleep
LocalFree
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
FindResourceW
LoadResource
GlobalLock
GlobalAlloc
SizeofResource
CreateProcessA
GlobalUnlock
CreateFileW
TerminateProcess
GetCurrentProcessId
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
ExitProcess
FreeResource
OutputDebugStringA
GetModuleFileNameW
LoadLibraryW
GetModuleHandleW
ReadFile
GetFileSize
SetFilePointer
GetFileType
DuplicateHandle
SystemTimeToFileTime
DosDateTimeToFileTime
WriteFile
MulDiv
InterlockedIncrement
InterlockedDecrement
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InitializeCriticalSection
DeleteCriticalSection
CreateToolhelp32Snapshot
GetModuleHandleA
Process32NextW
LockResource
Process32FirstW
GetLocalTime
DrawTextW
CopyAcceleratorTableW
AppendMenuW
CreatePopupMenu
MapWindowPoints
ClientToScreen
GetSysColor
GetCaretPos
HideCaret
ShowCaret
InvalidateRgn
CreateAcceleratorTableW
GetWindowTextLengthW
SetWindowTextW
ReleaseCapture
SetCapture
KillTimer
SetTimer
InvalidateRect
CreateCaret
GetKeyState
GetDC
ReleaseDC
CreateWindowExW
GetClassInfoExW
RegisterClassExW
RegisterClassW
SetPropW
GetPropW
MoveWindow
LoadImageW
SendMessageW
GetWindow
EnableWindow
GetMessageW
SetRect
DispatchMessageW
PostQuitMessage
DefWindowProcW
LoadCursorW
SetCursor
InflateRect
OffsetRect
SetWindowLongW
MessageBoxW
SetWindowRgn
ScreenToClient
IsZoomed
IsIconic
GetWindowRgn
CharNextW
GetUpdateRect
BeginPaint
EndPaint
GetClientRect
GetForegroundWindow
GetWindowThreadProcessId
SetForegroundWindow
BringWindowToTop
AttachThreadInput
SwitchToThisWindow
PtInRect
FindWindowW
PostMessageW
GetMonitorInfoW
IsRectEmpty
UpdateLayeredWindow
CopyImage
DestroyWindow
GetCursorPos
GetFocus
IntersectRect
CharPrevW
TranslateMessage
FillRect
SetCaretPos
GetCaretBlinkTime
WindowFromPoint
CallWindowProcW
GetWindowRect
GetParent
SetFocus
GetWindowLongW
GetWindowTextW
MonitorFromWindow
SetWindowPos
ShowWindow
IsWindow
RegOpenKeyExW
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryValueExW
ShellExecuteA
DragQueryFileW
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?_Id_cnt@id@locale@std@@0HA
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
??1?$codecvt@_WDH@std@@MAE@XZ
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
??0locale@std@@QAE@XZ
??1locale@std@@QAE@XZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??9locale@std@@QBE_NABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?thousands_sep@?$numpunct@D@std@@QBEDXZ
?grouping@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Getcat@?$numpunct@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?classic@locale@std@@SAABV12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?id@?$numpunct@D@std@@2V0locale@2@A
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
memmove
realloc
memset
memcpy
_wtoi
__dllonexit
_unlock
abort
strerror
_CxxThrowException
__CxxFrameHandler3
wcsstr
wcsrchr
_wcsicmp
_vsnwprintf
??_V@YAXPAX@Z
tolower
malloc
free
isdigit
wcschr
vswprintf_s
_vscwprintf
memcpy_s
__argc
??2@YAPAXI@Z
__wargv
??3@YAXPAX@Z
_purecall
_invalid_parameter_noinfo
??8type_info@@QBE_NABV0@@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
memmove_s
wcslen
wcscat
wcscpy
wcsncpy
strlen
wcscmp
_wcslwr
sprintf_s
toupper
wcscpy_s
wcstol
wcstoul
iswalnum
wcsncmp
sqrt
_gmtime64
calloc
strcmp
strcpy
memcmp
_vswprintf
abs
_lrotl
_errno
_encode_pointer
OleUIAddVerbMenuW
PlayEnhMetaFile
CreateCompatibleBitmap
CreateCompatibleDC
GetEnhMetaFileHeader
CreateDIBitmap
Rectangle
BitBlt
RestoreDC
SaveDC
CreateDIBSection
PtInRegion
CreateRectRgn
SelectClipRgn
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
DeleteDC
StretchBlt
SetStretchBltMode
CreateSolidBrush
LineTo
MoveToEx
CreatePenIndirect
RoundRect
TextOutW
GetTextExtentPoint32W
GetCharABCWidthsW
SetBkColor
SetTextColor
CreatePen
GetStockObject
SetBkMode
GdiFlush
GetObjectA
DeleteObject
GetObjectW
CreateFontIndirectW
SelectObject
GetTextMetricsW
GetDeviceCaps
CreateRoundRectRgn
CombineRgn
CoCreateInstance
StgCreateDocfile
CLSIDFromProgID
CLSIDFromString
ReleaseStgMedium
OleDuplicateData
DoDragDrop
OleLockRunning
CreateStreamOnHGlobal
SysAllocString
VariantClear
VariantInit
SysFreeString
GdipCloneImage
GdipDrawImageRectI
GdipGetPropertyItem
GdipGetPropertyItemSize
GdiplusStartup
GdiplusShutdown
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipDeleteGraphics
GdipDeleteFont
GdipCreateSolidFill
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipCreateFromHDC
GdipSetTextRenderingHint
GdipFillRectangleI
GdipDrawString
GdipMeasureString
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCloneBrush
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
strdup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE