Init_Plugin
Register_CallBack_Fun
Start_Listen_Service
Stop_Listen_Service
Static task
static1
Behavioral task
behavioral1
Sample
1c9bcdb1f986c062faaf00367b3ca1137c1fbdf5e932b9ccf3158abeac36ac37.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
1c9bcdb1f986c062faaf00367b3ca1137c1fbdf5e932b9ccf3158abeac36ac37.dll
Resource
win10v2004-20231025-en
Target
1c9bcdb1f986c062faaf00367b3ca1137c1fbdf5e932b9ccf3158abeac36ac37
Size
87KB
MD5
3017223363501511f12ae945a11304b4
SHA1
4565cb990a67db9721a93b0bba98312b4c4a0878
SHA256
1c9bcdb1f986c062faaf00367b3ca1137c1fbdf5e932b9ccf3158abeac36ac37
SHA512
5693cda1ffa0e0a24140529f406db3950ee5cb5ea9f611f61dde68211cda8fcd9817a402bad41589df329846cf5ae5bf2d2e73b65060c42339d386523be23e01
SSDEEP
1536:fNRTr8OE+yOMWYcuwsWjcdwV+iuq3hGorE:XH8EGfwV+iuq3hfrE
Checks for missing Authenticode signature.
resource |
---|
1c9bcdb1f986c062faaf00367b3ca1137c1fbdf5e932b9ccf3158abeac36ac37 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RpcEpUnregister
RpcServerUseProtseqEpW
RpcServerUnregisterIf
RpcBindingVectorFree
RpcServerRegisterIf2
RpcEpRegisterW
RpcServerInqBindings
NdrServerCall2
GetSystemTimeAsFileTime
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
CreateThread
WideCharToMultiByte
MultiByteToWideChar
GetLastError
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
Sleep
RaiseException
SetLastError
InterlockedIncrement
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
CreateFileW
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
LoadLibraryW
HeapReAlloc
RtlUnwind
LCMapStringW
Init_Plugin
Register_CallBack_Fun
Start_Listen_Service
Stop_Listen_Service
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ