EntryPoint
Ext_RunDLL
Start_RunDLL
Static task
static1
Behavioral task
behavioral1
Sample
e0d01814703a7c52aee4f93b001104bd4979540da5dde0b144fabb963ac35199.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e0d01814703a7c52aee4f93b001104bd4979540da5dde0b144fabb963ac35199.dll
Resource
win10v2004-20230915-en
Target
e0d01814703a7c52aee4f93b001104bd4979540da5dde0b144fabb963ac35199
Size
738KB
MD5
0f34792753739c72ae504548c0673add
SHA1
2408408b7eb37525d3b920e86918739f9fd8fc31
SHA256
e0d01814703a7c52aee4f93b001104bd4979540da5dde0b144fabb963ac35199
SHA512
869e591db5957a0268433adfe3f1bdef80bdfbdb539467b5b5d4559e847e16eee2e38be8866710e9fdcffd1b07eae74b14ff699ce8522b639b310958dd18b95f
SSDEEP
12288:soawhtyybAsLAk4uwXH3XEL0r2xN1Akq88pKJJFXh8x3Z6+vozdCORlIb:s8Es8k3OH3C0rQ6+8pKJJFo3Q+qdCO7I
Checks for missing Authenticode signature.
resource |
---|
e0d01814703a7c52aee4f93b001104bd4979540da5dde0b144fabb963ac35199 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
WriteFile
SetLastError
CreateProcessW
GetCurrentProcess
WaitForSingleObject
QueryFullProcessImageNameW
LoadLibraryW
DuplicateHandle
GetComputerNameA
FreeResource
FindResourceW
LoadResource
SetEvent
GetTickCount
InitializeCriticalSection
SizeofResource
LeaveCriticalSection
GetModuleFileNameW
CreateFileW
FlushFileBuffers
EnterCriticalSection
LockResource
CreateEventW
DeleteCriticalSection
CreateThread
HeapAlloc
GetProcAddress
GetProcessHeap
GetFileAttributesW
TlsFree
TlsSetValue
InterlockedDecrement
LocalFree
SetEndOfFile
OutputDebugStringA
TerminateProcess
OutputDebugStringW
GetLastError
Sleep
CreateMutexW
FileTimeToLocalFileTime
CloseHandle
CreateToolhelp32Snapshot
Process32NextW
SetStdHandle
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetSystemTimeAsFileTime
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
lstrlenW
WideCharToMultiByte
HeapFree
GetModuleHandleW
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
IsDebuggerPresent
FreeEnvironmentStringsW
GetModuleFileNameA
SetFilePointer
ReadFile
GetConsoleMode
GetConsoleCP
GetStartupInfoW
GetFileType
SetHandleCount
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
HeapSize
Process32FirstW
GlobalFree
FileTimeToSystemTime
GlobalAlloc
OpenProcess
TlsGetValue
GetProcessTimes
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
ExitProcess
ExitThread
GetCurrentThreadId
GetCommandLineA
RaiseException
GetCPInfo
RtlUnwind
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
EnumWindows
PostMessageW
GetWindowThreadProcessId
SendMessageW
EnumChildWindows
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
ShellExecuteExW
CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
SysFreeString
VariantClear
SysAllocString
SendARP
GetAdaptersInfo
GetAdaptersAddresses
inet_addr
PathFileExistsW
PathFileExistsA
PathRemoveFileSpecW
PathStripPathW
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpSendRequest
WinHttpReadData
WinHttpCrackUrl
WinHttpOpenRequest
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpConnect
HttpInitialize
HttpCreateHttpHandle
HttpTerminate
HttpReceiveHttpRequest
HttpSendHttpResponse
HttpAddUrl
EntryPoint
Ext_RunDLL
Start_RunDLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ