?RaiseException@@YAXXZ
AutoSend
CrSetADStop
Initialize
Initialize2
OnExiting
Static task
static1
Behavioral task
behavioral1
Sample
1537c5fd23bfa64649abfcf2f52b0e4804a1949eb5c8b5b1c120fe8914e12ffc.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1537c5fd23bfa64649abfcf2f52b0e4804a1949eb5c8b5b1c120fe8914e12ffc.dll
Resource
win10v2004-20230915-en
Target
1537c5fd23bfa64649abfcf2f52b0e4804a1949eb5c8b5b1c120fe8914e12ffc
Size
170KB
MD5
cd896f5bbe6f6e2c1d1118f2ce57f9f6
SHA1
c28fac3016a9f0f93e392ca4147be24f37d8ea47
SHA256
1537c5fd23bfa64649abfcf2f52b0e4804a1949eb5c8b5b1c120fe8914e12ffc
SHA512
72bff4baabda6ca69d8ce00598e2b8560e0ddac432b71a0233a703c2d1a271f34f24b53d7376289742e54fdbfa3ccd65d72125a44f599f9debb6dac853c45610
SSDEEP
3072:VSD+MM9A5UEDJ5I0+Jx+CzT/2qTkONzHkWCSx0GSYD+T9Pn/eLpr0bGeMMl:M0rvMCzTu+E7upSzlmLx01
Checks for missing Authenticode signature.
resource |
---|
1537c5fd23bfa64649abfcf2f52b0e4804a1949eb5c8b5b1c120fe8914e12ffc |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcess
GetModuleHandleW
GetTickCount
InitializeCriticalSection
Thread32First
WideCharToMultiByte
SizeofResource
LeaveCriticalSection
Thread32Next
CreateFileW
FlushInstructionCache
GetTempPathW
GetLastError
EnterCriticalSection
OpenThread
LockResource
DeviceIoControl
CreateMutexA
VirtualProtect
CreateToolhelp32Snapshot
SetUnhandledExceptionFilter
ReleaseMutex
CloseHandle
GetCurrentProcessId
SuspendThread
LoadLibraryExW
DeleteCriticalSection
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
GetProcAddress
GetModuleFileNameW
LoadLibraryW
HeapWalk
HeapLock
HeapUnlock
OutputDebugStringW
WaitForSingleObject
CreateMutexW
GetFileSizeEx
ReadFile
SetFilePointerEx
LocalFileTimeToFileTime
SystemTimeToFileTime
GetCurrentThreadId
FreeLibrary
RaiseException
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwind
GetModuleHandleA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
GetUserNameW
CoInitialize
CoUninitialize
PathFileExistsW
SHSetValueW
SHGetValueW
StrStrIW
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcBindingFree
NdrClientCall2
RpcStringFreeW
?RaiseException@@YAXXZ
AutoSend
CrSetADStop
Initialize
Initialize2
OnExiting
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ