Attach
Command
Configure
Detach
GetInfoData
GetInfoSize
SetHost
ShutDown
Static task
static1
Behavioral task
behavioral1
Sample
ac3899281914cee6eedea1e3953c68eece104bf9af86a14316b8780c5653de1d.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ac3899281914cee6eedea1e3953c68eece104bf9af86a14316b8780c5653de1d.dll
Resource
win10v2004-20231020-en
Target
ac3899281914cee6eedea1e3953c68eece104bf9af86a14316b8780c5653de1d
Size
317KB
MD5
55b03758335d5ee6ac609fa9c463e9b3
SHA1
0d3e3941ab590f8fe08ef6cb1aa8230f5e8e05e0
SHA256
ac3899281914cee6eedea1e3953c68eece104bf9af86a14316b8780c5653de1d
SHA512
3517bdb31e4c1a5ccfaffbde25a3bbe20ce8a55fd45d178fb78928c8ecc4f95928314900e76b6fcaeb68184be06e49fc84ae3ce25190a6edbda3be950b000486
SSDEEP
6144:5vDx+7NkSMYgx/qP0cmI1b8oS83eb4hAOkG8SmTA:5F+7NMYgx/qP0cpb8chyvDc
Checks for missing Authenticode signature.
resource |
---|
ac3899281914cee6eedea1e3953c68eece104bf9af86a14316b8780c5653de1d |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResetEvent
WaitForSingleObject
CreateEventW
CreateFileW
WriteFile
GetTickCount
SetLastError
ReleaseMutex
CreateMutexW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
CreateThread
GetCurrentThreadId
OpenThread
GetExitCodeThread
SuspendThread
ResumeThread
GetThreadContext
GetCurrentThread
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualQuery
GetCurrentProcessId
ExitProcess
SwitchToThread
FreeLibraryAndExitThread
MoveFileW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
SetFilePointerEx
GetStringTypeW
GetProcessHeap
CloseHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
DecodePointer
GetFileType
GetStdHandle
HeapAlloc
HeapFree
GetModuleHandleExW
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
K32EnumProcessModules
GetCurrentProcess
SetEvent
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
GetLastError
EnableWindow
BringWindowToTop
ShowWindow
SendMessageW
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
GetWindowThreadProcessId
PostMessageW
PeekMessageW
DispatchMessageW
GetWindow
GetClassNameW
SetWindowLongW
GetWindowLongW
FindWindowExW
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetWindowPos
SendMessageTimeoutW
IsWindowEnabled
IsWindowVisible
IsWindow
SymInitialize
SymGetLineFromAddr64
SymCleanup
SymSetOptions
SymFromAddr
Attach
Command
Configure
Detach
GetInfoData
GetInfoSize
SetHost
ShutDown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ