Init_Plugin
Register_CallBack_Fun
Start_Listen_Service
Stop_Listen_Service
Static task
static1
Behavioral task
behavioral1
Sample
e8aefa831796e5a37f489af31acde6b90427fe8ea24bb342b88982bf634a5768.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
e8aefa831796e5a37f489af31acde6b90427fe8ea24bb342b88982bf634a5768.dll
Resource
win10v2004-20231023-en
Target
e8aefa831796e5a37f489af31acde6b90427fe8ea24bb342b88982bf634a5768
Size
99KB
MD5
c2988dc6c5e0d250671371348b03a8f2
SHA1
64a4c42d2dda1ea660d9b223738a2823282dc447
SHA256
e8aefa831796e5a37f489af31acde6b90427fe8ea24bb342b88982bf634a5768
SHA512
23dc8ab1f3c2b6a009e22e49629ad2f616ebcb03149f03c933cc250622b9ab0ea8d34e80b68cad53eca4f0cf02d31f07420176713fffd57568ed0655df22a43c
SSDEEP
3072:gJyQTESfTzbKAf0FRHOYPNy24+UsWPqy:gJ7TFH8DHO6y2419C
Checks for missing Authenticode signature.
resource |
---|
e8aefa831796e5a37f489af31acde6b90427fe8ea24bb342b88982bf634a5768 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
RpcEpUnregister
RpcServerUseProtseqEpW
RpcServerUnregisterIf
RpcBindingVectorFree
RpcServerRegisterIf2
RpcEpRegisterW
RpcServerInqBindings
NdrServerCall2
GetEnvironmentStringsW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
CreateThread
WideCharToMultiByte
MultiByteToWideChar
GetLastError
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
Sleep
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
LoadLibraryW
HeapReAlloc
LCMapStringW
Init_Plugin
Register_CallBack_Fun
Start_Listen_Service
Stop_Listen_Service
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ