LoginPro
LoginTYFw
getXuhaoVal
getXuhaoVal2
xtLoginTYFw
Static task
static1
Behavioral task
behavioral1
Sample
ae4e07381aca91c85b28ad9d2baecb5716063062be3a93db9ea179514d196dea.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
ae4e07381aca91c85b28ad9d2baecb5716063062be3a93db9ea179514d196dea.dll
Resource
win10v2004-20231020-en
Target
ae4e07381aca91c85b28ad9d2baecb5716063062be3a93db9ea179514d196dea
Size
4.6MB
MD5
4f4cbe0ad958ed888e94ca2b7d3d5fa1
SHA1
4612c8ff9f398b9a1beee385b34f8d2bf54209d3
SHA256
ae4e07381aca91c85b28ad9d2baecb5716063062be3a93db9ea179514d196dea
SHA512
076570db67d454a5fe1a95641c7b9259c41a0bbf3d12a520dccbb5c914bbef3b87af8578ff629ef1b69cfa91a52e31a6b144d4cfd7856a97e416028a14861640
SSDEEP
49152:/AFDC8Yk3Ws0TRkMYACqgrmIFmkMVxW3A1Y/orJhiMxbwkeIXSfoaaoZ31flnVhR:/yG8Y1xYVrm+MGArJhFwkeJP3Vxm
Checks for missing Authenticode signature.
resource |
---|
ae4e07381aca91c85b28ad9d2baecb5716063062be3a93db9ea179514d196dea |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindResourceW
GetLastError
SizeofResource
LoadResource
LockResource
CreatePipe
MultiByteToWideChar
CreateProcessW
WaitForSingleObject
CloseHandle
Sleep
CreateThread
WideCharToMultiByte
GetCurrentProcessId
GetModuleFileNameW
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
TerminateProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEndOfFile
CreateFileW
OutputDebugStringW
WriteConsoleW
SetStdHandle
ReadConsoleW
LoadLibraryExW
HeapReAlloc
FreeEnvironmentStringsW
DeleteCriticalSection
EncodePointer
DecodePointer
GetStringTypeW
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
HeapAlloc
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
IsValidCodePage
GetACP
GetOEMCP
GetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
FlushFileBuffers
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FindWindowW
PostMessageW
FindWindowExW
SHChangeNotify
LoginPro
LoginTYFw
getXuhaoVal
getXuhaoVal2
xtLoginTYFw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ