LoginPro
LoginTYFw
getXuhaoVal
getXuhaoVal2
xtLoginTYFw
Static task
static1
Behavioral task
behavioral1
Sample
252cd249dbbe2f62697ccdc8a40a0bd43996fb09e87cdcbb36ddb572e30a0489.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
252cd249dbbe2f62697ccdc8a40a0bd43996fb09e87cdcbb36ddb572e30a0489.dll
Resource
win10v2004-20231023-en
Target
252cd249dbbe2f62697ccdc8a40a0bd43996fb09e87cdcbb36ddb572e30a0489
Size
4.5MB
MD5
919a8ccaf5c28ead3823d99168fe9384
SHA1
ac2a5435b277c8b4b7d40c9c89b847fccd2380e2
SHA256
252cd249dbbe2f62697ccdc8a40a0bd43996fb09e87cdcbb36ddb572e30a0489
SHA512
3510d1d51b14f37a71f00ab7cf6ad77b4704697510d073527f178b54797bf78f1de4a04b44b7e20b2b05fdbbd66e33e72c5491c7b581e34425b9606d3c8bb6c5
SSDEEP
49152:VykhhBIZ0uXH/as1T0apQ6YOFcq/ePmusdO5I41S9k6/8vTtD1Ot2r12G7o5ZDxY:VcRFQ6Y8mPadO5c9N2TKtrDx
Checks for missing Authenticode signature.
resource |
---|
252cd249dbbe2f62697ccdc8a40a0bd43996fb09e87cdcbb36ddb572e30a0489 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindResourceW
GetLastError
SizeofResource
LoadResource
LockResource
CreatePipe
MultiByteToWideChar
CreateProcessW
WaitForSingleObject
CloseHandle
Sleep
CreateThread
WideCharToMultiByte
GetCurrentProcessId
GetModuleFileNameW
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
TerminateProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEndOfFile
CreateFileW
OutputDebugStringW
WriteConsoleW
SetStdHandle
ReadConsoleW
LoadLibraryExW
HeapReAlloc
DeleteCriticalSection
EncodePointer
DecodePointer
GetStringTypeW
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
HeapAlloc
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
IsValidCodePage
GetACP
GetOEMCP
GetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
FlushFileBuffers
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
PostMessageW
FindWindowExW
FindWindowW
LoginPro
LoginTYFw
getXuhaoVal
getXuhaoVal2
xtLoginTYFw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ