DebugLogW
DebugLog_
Execute
SetLogSeverity_
SetLogTarget_
Static task
static1
Behavioral task
behavioral1
Sample
9e47448e7a43be035855ccd424c1046729f9c34935fea4a950e293f04a1c6f4a.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
9e47448e7a43be035855ccd424c1046729f9c34935fea4a950e293f04a1c6f4a.dll
Resource
win10v2004-20231023-en
Target
9e47448e7a43be035855ccd424c1046729f9c34935fea4a950e293f04a1c6f4a
Size
2.0MB
MD5
85c524204e70ccd8e7ea05d4bb02d106
SHA1
b8f189fe17ae06c18b4d495242189e9936d98947
SHA256
9e47448e7a43be035855ccd424c1046729f9c34935fea4a950e293f04a1c6f4a
SHA512
b6ac5ee093adb42c6b8716ee20bdd26857ed484aafffa6d9d1aaebbb3af5bd72ad0fede8cd47d99066ad1f5ea9d9688a3d2d2f4389e8f37f03c4e0412a658853
SSDEEP
49152:SRYe/RE00uDWhJIfANzecd4b84IJWvDzmF0qsvTo9D366wqDsORQL3:deJEASTn44Ozq3QToEPfj
Checks for missing Authenticode signature.
resource |
---|
9e47448e7a43be035855ccd424c1046729f9c34935fea4a950e293f04a1c6f4a |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetAdaptersInfo
pthread_mutex_unlock
pthread_mutex_lock
MD5_Update
MD5_Init
MD4_Final
MD4_Update
MD4_Init
SHA512_Final
SHA512_Update
SHA512_Init
MD5_Final
SHA384_Update
SHA384_Init
SHA256_Final
SHA256_Update
SHA256_Init
SHA224_Final
SHA224_Update
SHA224_Init
AES_set_decrypt_key
AES_set_encrypt_key
AES_cbc_encrypt
SHA384_Final
SHA1_Init
SHA1_Update
SHA1_Final
PEM_read_bio_RSAPrivateKey
RSA_private_decrypt
BIO_new_mem_buf
PEM_read_bio_RSA_PUBKEY
BIO_free
RSA_size
RSA_public_encrypt
RSA_free
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
DecodePointer
EncodePointer
GetTickCount
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DisableThreadLibraryCalls
QueryPerformanceCounter
Sleep
GetLogicalDriveStringsW
GetDriveTypeW
GetDiskFreeSpaceExW
GlobalMemoryStatusEx
GetLastError
FormatMessageW
LocalFree
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetFileAttributesW
SetFileAttributesW
WideCharToMultiByte
MultiByteToWideChar
CreateDirectoryW
GetEnvironmentVariableW
GetModuleFileNameA
CloseHandle
ReadFile
CreateFileW
DeleteFileW
RegCreateKeyA
RegQueryInfoKeyA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?_Random_device@tr1@std@@YAIXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1_Container_base12@std@@QEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_BADOFF@std@@3_JB
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
strpbrk
?terminate@@YAXXZ
__C_specific_handler
_unlock
??0exception@std@@QEAA@XZ
__dllonexit
_lock
_onexit
_vsnprintf
_malloc_crt
_initterm
_initterm_e
_encoded_null
_amsg_exit
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__crt_debugger_hook
__clean_type_info_names_internal
_finite
??0exception@std@@QEAA@AEBQEBD@Z
?what@exception@std@@UEBAPEBDXZ
??1exception@std@@UEAA@XZ
??3@YAXPEAX@Z
memcmp
memcpy
memchr
memmove
_purecall
??2@YAPEAX_K@Z
_CxxThrowException
??0exception@std@@QEAA@AEBV01@@Z
__CxxFrameHandler3
strncmp
strncpy
free
malloc
memset
_gmtime64
_time64
??_V@YAXPEAX@Z
sprintf
_waccess
_access
_wrename
sscanf
_localtime64
fflush
fputs
_snprintf
strftime
_snwprintf
wcsftime
_wfopen
_wstat64i32
fclose
__iob_func
toupper
calloc
strstr
modf
sprintf_s
DebugLogW
DebugLog_
Execute
SetLogSeverity_
SetLogTarget_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE