CreateObject
DestroyObject
ExportFunc1
ExportFunc10
ExportFunc11
ExportFunc12
ExportFunc13
ExportFunc14
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
ExportFunc6
ExportFunc7
ExportFunc8
ExportFunc9
Static task
static1
Behavioral task
behavioral1
Sample
1db6a740a26ef527b3a905b8e8086d3c148bec395c848134900859ff09d55cc9.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
1db6a740a26ef527b3a905b8e8086d3c148bec395c848134900859ff09d55cc9.dll
Resource
win10v2004-20231023-en
Target
1db6a740a26ef527b3a905b8e8086d3c148bec395c848134900859ff09d55cc9
Size
7.1MB
MD5
0ead7478773e6b3e9006f3bdfa2119dd
SHA1
403e0044219fa59c8ebd6c82dad8013cb07b06ea
SHA256
1db6a740a26ef527b3a905b8e8086d3c148bec395c848134900859ff09d55cc9
SHA512
57abd628cd2164fba61b12d32b927139f29725c2f53b327bb0ed77b398ac89b43e9bab65384cf9ad52ef3032806cf7a0610e89009cb2282545e7e0c6db164b42
SSDEEP
196608:GJzColboj5Vxw0XIgOQgEsgdpVT/e446EP:GJzColboj5Vxw0XIgOQgK36
Checks for missing Authenticode signature.
resource |
---|
1db6a740a26ef527b3a905b8e8086d3c148bec395c848134900859ff09d55cc9 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
PathIsNetworkPathW
PathMatchSpecW
PathFileExistsW
PathFindFileNameW
StrStrIW
PathRemoveFileSpecW
PathAppendW
PathFindExtensionW
MoveFileExW
WriteFile
CopyFileW
SizeofResource
FlushFileBuffers
GetProcAddress
MoveFileW
CloseHandle
SetEvent
Sleep
OpenThread
GetWindowsDirectoryW
WritePrivateProfileStringW
LoadResource
GetLocalTime
GetFileSize
lstrlenA
FileTimeToSystemTime
ReadFile
GetComputerNameExW
FileTimeToLocalFileTime
GetCurrentProcessId
OpenProcess
ReadProcessMemory
GetFileTime
DuplicateHandle
SetFilePointer
GetCurrentThreadId
GetUserDefaultLangID
CreateMutexW
GetModuleHandleExW
ReleaseMutex
GetEnvironmentVariableW
VirtualQuery
GetLogicalDriveStringsW
QueryDosDeviceW
FreeLibrary
FindResourceW
FreeResource
CheckRemoteDebuggerPresent
DeleteFileW
IsDebuggerPresent
DisableThreadLibraryCalls
GetTempPathW
CreateFileW
GetModuleFileNameW
LoadLibraryW
IsBadReadPtr
IsBadStringPtrW
GetTempFileNameW
CreateDirectoryW
QueryPerformanceFrequency
SetEnvironmentVariableA
GetCurrentProcess
CreateThread
GetLastError
TerminateThread
GetTickCount
WaitForSingleObject
GetPrivateProfileIntW
GetDiskFreeSpaceW
SetStdHandle
DeviceIoControl
SetLastError
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
LockResource
ReleaseSemaphore
CreateSemaphoreW
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
ResetEvent
CreateEventW
OpenEventW
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetShortPathNameW
GetDriveTypeW
SearchPathW
WideCharToMultiByte
GetFileAttributesW
ResumeThread
GetACP
MultiByteToWideChar
GetModuleHandleW
LoadLibraryA
ExpandEnvironmentStringsW
GetVersionExW
GetSystemInfo
lstrcmpiW
OpenMutexW
SetEndOfFile
SetFileTime
FindClose
FindNextFileW
HeapAlloc
HeapFree
GetProcessHeap
GlobalAlloc
GlobalFree
LocalFree
LoadLibraryExW
GetFileInformationByHandle
GetVolumeInformationW
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
GetFullPathNameW
GetSystemDirectoryW
lstrlenW
GetCurrentDirectoryW
SetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
lstrcatW
lstrcpyW
GetFileSizeEx
FormatMessageW
FileTimeToDosDateTime
DosDateTimeToFileTime
SystemTimeToFileTime
GetSystemTime
LocalFileTimeToFileTime
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
GlobalMemoryStatusEx
GetStringTypeW
EncodePointer
GetSystemTimeAsFileTime
GetCurrentThread
GetExitCodeThread
HeapReAlloc
RtlPcToFileHeader
GetStdHandle
GetFileType
WriteConsoleW
CreateTimerQueue
IsProcessorFeaturePresent
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
RtlCaptureStackBackTrace
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetCommandLineA
ExitThread
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
FatalAppExitA
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
AreFileApisANSI
HeapSize
IsValidCodePage
GetOEMCP
SetConsoleCtrlHandler
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
InitializeSListHead
UnregisterWaitEx
VirtualAlloc
VirtualFree
VirtualProtect
SetProcessAffinityMask
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetTimeZoneInformation
WaitForMultipleObjectsEx
IsWindow
wsprintfW
GetClassNameW
GetWindowTextW
GetWindowLongW
IsWindowVisible
GetForegroundWindow
GetWindowThreadProcessId
MessageBoxW
UnregisterClassW
GetUserObjectInformationW
GetProcessWindowStation
DeregisterEventSource
AdjustTokenPrivileges
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
LookupPrivilegeValueW
SetNamedSecurityInfoW
GetTokenInformation
OpenProcessToken
LookupPrivilegeNameW
ReportEventW
RegisterEventSourceW
ChangeServiceConfigW
StartServiceW
OpenServiceW
CreateServiceW
CloseServiceHandle
OpenSCManagerW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegOpenCurrentUser
RegCreateKeyExW
RegDeleteValueW
RegFlushKey
SHGetFolderPathW
CommandLineToArgvW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptQueryObject
CryptMsgClose
CryptMsgGetParam
CoUninitialize
CoCreateInstance
CoInitialize
GetProcessImageFileNameW
CreateObject
DestroyObject
ExportFunc1
ExportFunc10
ExportFunc11
ExportFunc12
ExportFunc13
ExportFunc14
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
ExportFunc6
ExportFunc7
ExportFunc8
ExportFunc9
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ