UpdataCleanme
UpdataInfoToWeb
UpdataLog
UpdataOpInfoToWeb
Static task
static1
Behavioral task
behavioral1
Sample
6b29b81d94bbc8ebf19099cda6d081c702d26397258ccd3725b93563a160c356.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6b29b81d94bbc8ebf19099cda6d081c702d26397258ccd3725b93563a160c356.dll
Resource
win10v2004-20230915-en
Target
6b29b81d94bbc8ebf19099cda6d081c702d26397258ccd3725b93563a160c356
Size
663KB
MD5
6b3c292ab86c7a4a802c65dd3b9d4264
SHA1
9945fb06f442db6808487bb7711fe80039027f45
SHA256
6b29b81d94bbc8ebf19099cda6d081c702d26397258ccd3725b93563a160c356
SHA512
c79d3bce02836d88adf77e69948adbdf6c0856de6a22c18b9ce11e96cebd848c73c72e823b2b5a652edcae1d7bc9ceba651e8260a9cc9c9e878c4cffc0317ce3
SSDEEP
12288:gJrLwESbzZulixPFiVamvLgAtdBBn8g6ix9Bv:W8ESbsixPcVamvLgAt/Bn83ix9B
Checks for missing Authenticode signature.
resource |
---|
6b29b81d94bbc8ebf19099cda6d081c702d26397258ccd3725b93563a160c356 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetPrivateProfileStringA
GetLocalTime
SetCurrentDirectoryA
WritePrivateProfileStringA
ExitProcess
WaitForSingleObject
ReleaseMutex
CreateFileW
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
LoadLibraryA
MultiByteToWideChar
GetProcAddress
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetFileAttributesA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RtlUnwind
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
FreeLibrary
HeapCreate
VirtualFree
LocalAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleHandleA
GetVersion
FlushConsoleInputBuffer
GlobalMemoryStatus
GetVersionExA
SetConsoleMode
ReadConsoleInputA
LocalFree
WideCharToMultiByte
WriteFile
Sleep
CreateMutexA
ReadFile
CloseHandle
GetFileSize
CreateFileA
VirtualAlloc
FindResourceExA
GetLastError
GetModuleFileNameA
SetEndOfFile
GetUserObjectInformationW
MessageBoxA
GetProcessWindowStation
GetDesktopWindow
RegisterEventSourceA
DeregisterEventSource
ReportEventA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
UpdataCleanme
UpdataInfoToWeb
UpdataLog
UpdataOpInfoToWeb
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ