launch_v0
launch_v10
launch_v100
launch_v11
launch_v12
Static task
static1
Behavioral task
behavioral1
Sample
d7028d4586e463cd4d0b9348ba2705beb0bde548670b0ac52ae24b5800935ebc.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
d7028d4586e463cd4d0b9348ba2705beb0bde548670b0ac52ae24b5800935ebc.dll
Resource
win10v2004-20231020-en
Target
d7028d4586e463cd4d0b9348ba2705beb0bde548670b0ac52ae24b5800935ebc
Size
86KB
MD5
f95af661affba2242f184335ab69817a
SHA1
3783441e4963a1996819f993ef5e748968b1c92e
SHA256
d7028d4586e463cd4d0b9348ba2705beb0bde548670b0ac52ae24b5800935ebc
SHA512
ad9d5fd157ac49606bb1ace5be8fd51d7e243490e8b15dc88eecc0213091d9761f5da4faa9458c3ec16ab5282b6c2694590816960aa869a6315abbb3abcd163a
SSDEEP
1536:lA93Plk/CGotyncN8Jv7AunvToBmDJebqXr:lO+CG8lN8FAVBmDJebq
Checks for missing Authenticode signature.
resource |
---|
d7028d4586e463cd4d0b9348ba2705beb0bde548670b0ac52ae24b5800935ebc |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
_time64
strtok
strncpy
remove
fopen
fclose
__pctype_func
_mkdir
strncmp
rand
strcpy
strcat
strcmp
malloc
free
tolower
_errno
strtol
_initterm
_iob
___lc_handle_func
___lc_codepage_func
_lock
_unlock
_isatty
fflush
_fileno
?terminate@@YAXXZ
ceil
log10
_clearfp
memcpy
memset
strrchr
memcmp
__C_specific_handler
memmove
__CxxFrameHandler
_rmdir
abort
_callnewh
_strrev
_CxxThrowException
strlen
CryptStringToBinaryA
CryptBinaryToStringA
CryptImportPublicKeyInfo
CryptDecodeObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
WideCharToMultiByte
GetModuleHandleExW
GetModuleHandleW
GetCurrentThreadId
LocalFree
ExitThread
ExitProcess
EnterCriticalSection
RtlCaptureContext
LeaveCriticalSection
GetProcAddress
GetCurrentProcess
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
GetComputerNameA
GetVersionExA
GetACP
GetOEMCP
FreeLibrary
Sleep
GetLastError
GetLogicalDrives
FindClose
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetCurrentDirectoryA
GetFileAttributesA
FindFirstFileA
FindNextFileA
WaitForSingleObject
CloseHandle
MultiByteToWideChar
OpenProcess
TerminateProcess
ProcessIdToSessionId
CreateToolhelp32Snapshot
Process32First
Process32Next
CreateThread
VirtualProtect
FreeSid
GetUserNameA
CheckTokenMembership
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptGenRandom
CryptGetHashParam
CryptSetHashParam
CryptSetKeyParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
LookupAccountSidA
GetTokenInformation
OpenProcessToken
AllocateAndInitializeSid
InternetOpenA
InternetConnectA
InternetReadFile
InternetQueryDataAvailable
InternetQueryOptionA
InternetSetOptionA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetCloseHandle
htons
ntohs
WSASocketA
WSAIoctl
WSACleanup
WSAStartup
htonl
closesocket
ntohl
launch_v0
launch_v10
launch_v100
launch_v11
launch_v12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ