AddProtectFile
AddProtectReg
AddTrustProcess
ClearProtectFile
ClearProtectReg
ClearTrustProcess
SHDeleteSelfProtectService
SHGetDumpPath
SHStartSelfProtectService
Static task
static1
Behavioral task
behavioral1
Sample
b518d53e3140e141461ba01402295e6f9b3d8f2ace620e1c495b0e7055f87121.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b518d53e3140e141461ba01402295e6f9b3d8f2ace620e1c495b0e7055f87121.exe
Resource
win10v2004-20230915-en
Target
b518d53e3140e141461ba01402295e6f9b3d8f2ace620e1c495b0e7055f87121
Size
4.8MB
MD5
1b4d242c629be5e4ce749a529e940a37
SHA1
fed9ddf52030d24d13096cdf4a7f39310ad8c74c
SHA256
b518d53e3140e141461ba01402295e6f9b3d8f2ace620e1c495b0e7055f87121
SHA512
8a8354ce9676c78e5f50c55084b1f95746ff4179e5d573ed3e4293b3d5554f5f5071234cc7ba5f82dc5ddab504a8ffbed0a60cc2d520d71ddb8467073f0d9c65
SSDEEP
98304:P/j/02bSJLDgOVuSrak1HDaaVr0J4pIbzbvhB+Hh:P/j/VWJLDg0zjjrPp8JYB
Checks for missing Authenticode signature.
resource |
---|
b518d53e3140e141461ba01402295e6f9b3d8f2ace620e1c495b0e7055f87121 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WaitForMultipleObjects
GetSystemDirectoryA
SleepEx
lstrlenA
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetFileInformationByHandle
InterlockedCompareExchange
FreeLibraryAndExitThread
GetCurrentDirectoryW
GlobalUnlock
GlobalLock
DeleteFileW
GetTempPathW
FindResourceW
WriteFile
SizeofResource
LoadResource
LockResource
WideCharToMultiByte
SetCurrentDirectoryW
OutputDebugStringA
MulDiv
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetModuleHandleW
GetLastError
PeekNamedPipe
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
WritePrivateProfileStringW
GetModuleFileNameW
ReadFile
GetFileSize
CreateThread
Sleep
GetCurrentProcess
GlobalFree
GlobalAlloc
CreateFileW
GetSystemDirectoryW
DeviceIoControl
QueryDosDeviceW
GetWindowsDirectoryW
LoadLibraryW
GetLogicalDriveStringsW
ExpandEnvironmentStringsW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
ExitThread
GetCurrentProcessId
FileTimeToSystemTime
MultiByteToWideChar
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
FindFirstFileA
FindNextFileA
ExpandEnvironmentStringsA
FindClose
CreateFileA
MoveFileExW
VerSetConditionMask
CopyFileW
VerifyVersionInfoW
WaitForSingleObject
CreateProcessW
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
GetSystemInfo
FormatMessageW
GetVersionExW
GetPrivateProfileIntW
GetPrivateProfileStringW
FindFirstFileW
FindNextFileW
CreateDirectoryW
RemoveDirectoryW
ReleaseMutex
CreateMutexW
GetFileSizeEx
GetTickCount
AreFileApisANSI
SetErrorMode
GetLocalTime
FlushInstructionCache
HeapCreate
FreeResource
SetLastError
GetFullPathNameW
GetVersionExA
GetSystemTime
LoadLibraryA
GetModuleHandleA
EncodePointer
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
GetFileType
WriteConsoleW
GetStringTypeW
CompareStringW
LCMapStringW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
OutputDebugStringW
SetStdHandle
GetConsoleCP
GetTimeZoneInformation
FlushFileBuffers
SetEndOfFile
lstrlenW
lstrcmpiW
CloseHandle
OpenProcess
GetProcAddress
FreeLibrary
AnimateWindow
SetLayeredWindowAttributes
IsIconic
IsZoomed
GetCapture
SetCapture
ReleaseCapture
UpdateWindow
BeginPaint
EndPaint
InvalidateRect
ScreenToClient
GetClassNameW
DestroyIcon
LoadBitmapW
CreateIconFromResource
LoadImageW
CharNextW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
ClientToScreen
SetRect
EnableMenuItem
GetSysColor
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
IsWindowVisible
DrawTextW
SystemParametersInfoA
CharLowerBuffW
MapVirtualKeyA
UpdateLayeredWindow
IsMenu
IsWindowEnabled
CreatePopupMenu
IsRectEmpty
GetMenuItemCount
MonitorFromWindow
TrackPopupMenu
GetMenuInfo
PostQuitMessage
GetMenuItemInfoW
SetMenuContextHelpId
wsprintfW
GetIconInfo
DrawIconEx
InflateRect
ReleaseDC
GetDC
UnionRect
CopyRect
SetCursor
KillTimer
SetTimer
DestroyWindow
DestroyCursor
LoadCursorW
SendMessageW
IsWindow
GetActiveWindow
GetSystemMetrics
GetCursorPos
OffsetRect
GetWindowLongW
SystemParametersInfoW
ShowWindow
SetWindowPos
SetWindowTextW
SetForegroundWindow
FindWindowW
GetWindow
GetParent
SetWindowLongW
MapWindowPoints
GetWindowRect
GetClientRect
GetDlgItem
CreateWindowExW
RegisterClassExW
PostMessageW
TrackMouseEvent
SetMenuInfo
GetMonitorInfoW
CallWindowProcW
DefWindowProcW
GetKeyState
GetFocus
SetFocus
PtInRect
AppendMenuW
EqualRect
IntersectRect
UnregisterClassW
DestroyMenu
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
ImpersonateLoggedOnUser
RevertToSelf
DuplicateTokenEx
CreateProcessAsUserW
LookupAccountSidW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetTokenInformation
GetTokenInformation
OpenProcessToken
RegQueryValueExA
CreateServiceW
CloseServiceHandle
OpenSCManagerW
RegFlushKey
DeleteService
StartServiceW
OpenServiceW
RegDeleteValueW
SHGetPathFromIDListW
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
SHBrowseForFolderW
CoCreateGuid
CoUninitialize
CoInitialize
OleUninitialize
OleLockRunning
CLSIDFromString
CoCreateInstance
OleInitialize
CLSIDFromProgID
CreateStreamOnHGlobal
CreateBindCtx
PathFileExistsW
StrToIntExW
EnumProcessModules
GetModuleFileNameExW
EnumProcesses
GetProcessImageFileNameW
CryptQueryObject
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam
CryptMsgClose
GdipImageGetFrameDimensionsList
GdipGetImageEncoders
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipSaveImageToFile
GdipGraphicsClear
GdipGetImageEncodersSize
GdipDrawImageRectI
ImmAssociateContext
ImmGetContext
ImmDestroyContext
ImmCreateContext
ImmReleaseContext
StretchBlt
SetTextColor
SetBkMode
Rectangle
GetStockObject
CreateSolidBrush
CreateCompatibleDC
CreateFontIndirectW
GetDeviceCaps
CreateBitmap
EnumFontsW
BitBlt
GetViewportOrgEx
GetCurrentObject
SetViewportOrgEx
GetObjectW
GdiFlush
GetTextFaceW
ExtTextOutW
GetTextMetricsW
SetTextAlign
RemoveFontMemResourceEx
AddFontMemResourceEx
GetTextExtentPointI
GetGlyphIndicesW
GetFontUnicodeRanges
GetOutlineTextMetricsW
GetGlyphOutlineW
GetFontData
GetCharABCWidthsW
EnumFontFamiliesExW
CreateDIBSection
SetWorldTransform
SetGraphicsMode
SelectObject
SelectClipRgn
IntersectClipRect
ExtCreateRegion
DeleteObject
DeleteDC
CreatePen
SysAllocString
SysFreeString
DestroyEnvironmentBlock
CreateEnvironmentBlock
socket
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
setsockopt
WSASetLastError
htonl
closesocket
inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
getservbyname
__WSAFDIsSet
select
recvfrom
sendto
accept
listen
ioctlsocket
gethostname
WSAGetLastError
send
recv
WSACleanup
WSAStartup
inet_addr
ScriptItemize
ScriptFreeCache
ScriptShape
AddProtectFile
AddProtectReg
AddTrustProcess
ClearProtectFile
ClearProtectReg
ClearTrustProcess
SHDeleteSelfProtectService
SHGetDumpPath
SHStartSelfProtectService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ