EZLIPo5E
FyTjr
PFrdne5RL
StartDll
TAFxTTG
Static task
static1
Behavioral task
behavioral1
Sample
1232d3aed4a46219093ac9ed94e27be3bfc5c99e17b0b9c6dcc0734022e35385.dll
Resource
win7-20231023-en
Target
1232d3aed4a46219093ac9ed94e27be3bfc5c99e17b0b9c6dcc0734022e35385.zip
Size
1.2MB
MD5
8b750eaf94997b8b011124c748088513
SHA1
c4db5fdc06f191dda8210c3931747793a472d9ad
SHA256
5d1ec1e5aa5f500b2e934784e8480de339379344831caa1868eb2b2711795b3f
SHA512
ee9fd650719421e43b34c01098d566af61e5224ebef50611874815310ffbbc558e2f59ede7e97790d10747a96ded1d498f86f07f3442eb9e7d85706babe27008
SSDEEP
24576:J2HwPQRh8eXgqB5KvD+M/JGVXNDwp7OrnTOhPzOGwdVhS3vjjalD:0QoRhpV4/+9DVb1y3q
Checks for missing Authenticode signature.
resource |
---|
unpack001/1232d3aed4a46219093ac9ed94e27be3bfc5c99e17b0b9c6dcc0734022e35385 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
ConvertThreadToFiber
CreateFiber
SwitchToFiber
CreateActCtxA
ActivateActCtx
OpenThread
GetFileAttributesA
FindFirstFileA
FindNextFileA
CreateNamedPipeA
ConnectNamedPipe
DisconnectNamedPipe
VirtualAlloc
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStringTypeW
GetLastError
SetLastError
MultiByteToWideChar
GetACP
EncodePointer
DecodePointer
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
RaiseException
RtlUnwind
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
WriteConsoleW
CloseHandle
CreateFileW
EZLIPo5E
FyTjr
PFrdne5RL
StartDll
TAFxTTG
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ