?Ki@@YGHPAUHINSTANCE__@@KPAX@Z
?_@@YAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
7d933c3bef8c78951ad22640791a2559b5db16b599aacd82afc1187a41e494f3.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7d933c3bef8c78951ad22640791a2559b5db16b599aacd82afc1187a41e494f3.dll
Resource
win10v2004-20230915-en
Target
7d933c3bef8c78951ad22640791a2559b5db16b599aacd82afc1187a41e494f3
Size
415KB
MD5
3b3ad85ebc01c5c2a846f12d611f940e
SHA1
ce28f96330ac980cef1b1c8307d90890267ee5a1
SHA256
7d933c3bef8c78951ad22640791a2559b5db16b599aacd82afc1187a41e494f3
SHA512
74f1ba64296c2cf921b7d67450f4d183a3268aeca4164074d5382a3883a36b2ca6c97ead3bd11c5c8eb9414b913fd3e818753ce2d0d80028b8b3eb4ad6f09d41
SSDEEP
12288:a5vMz9ut2qGAP7lbfhGMs/t3OHZNPrideessS3Jze:0cxfO7lbYMc3O5NzidbssSJ
Checks for missing Authenticode signature.
resource |
---|
7d933c3bef8c78951ad22640791a2559b5db16b599aacd82afc1187a41e494f3 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetCurrentProcess
WaitForSingleObject
Sleep
CloseHandle
DuplicateHandle
LoadLibraryA
GetModuleHandleA
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
DecodePointer
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetACP
HeapAlloc
HeapFree
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW
?Ki@@YGHPAUHINSTANCE__@@KPAX@Z
?_@@YAXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ