FreeUnzipBuf
GetDllVersionA
PrepareUnzipFile
SetZipLevel
UnZip
UnZipEx
UnZipFile
ZipFolder
ZipFolderEx
Static task
static1
Behavioral task
behavioral1
Sample
fb23db09f376e0ec09fcb6f985d3dab40acef3b2f5ed6a68779026440d4367b5.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
fb23db09f376e0ec09fcb6f985d3dab40acef3b2f5ed6a68779026440d4367b5.dll
Resource
win10v2004-20231023-en
Target
fb23db09f376e0ec09fcb6f985d3dab40acef3b2f5ed6a68779026440d4367b5
Size
120KB
MD5
0fa31fda7dba067cee4d86bd54561bc8
SHA1
f6908c6d156cfe33ebbe8ff7cd30d547dbc6ef9c
SHA256
fb23db09f376e0ec09fcb6f985d3dab40acef3b2f5ed6a68779026440d4367b5
SHA512
aa24ad9fe10f1cba6b82c9fd47f82cbc686e939f636198f307f828e777d9e06f5749b1584ca7be08ee7c97164359c0bf7081b367512aace78c5e53be3d5bd1ed
SSDEEP
768:fCXIQgpk/GcnSskbUQfS7cxdSxPHQoQz2W0CVz:64QgpkOcSkQfS7cxD330k
Checks for missing Authenticode signature.
resource |
---|
fb23db09f376e0ec09fcb6f985d3dab40acef3b2f5ed6a68779026440d4367b5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
TerminateProcess
CloseHandle
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualProtectEx
GetModuleHandleA
VirtualFree
ReadFile
GetFileSize
SetFilePointer
CreateFileA
ExitProcess
CopyFileA
lstrcpyA
WriteFile
DeleteFileA
lstrcmpiA
CreateDirectoryA
lstrlenA
GetModuleFileNameA
wsprintfA
MessageBoxA
srand
_onexit
__dllonexit
_chkesp
memmove
memset
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
rand
calloc
time
free
_initterm
malloc
_adjust_fdiv
FreeUnzipBuf
GetDllVersionA
PrepareUnzipFile
SetZipLevel
UnZip
UnZipEx
UnZipFile
ZipFolder
ZipFolderEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ