ExtOperation
GetRawKey
InitSdk
QueryInterface
StartVpnCore
StopVpnCore
Static task
static1
Behavioral task
behavioral1
Sample
06564bb4ce93af919244c75636d0ebfa3bcf14760f4e88a05497d977dbbb365e.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
06564bb4ce93af919244c75636d0ebfa3bcf14760f4e88a05497d977dbbb365e.dll
Resource
win10v2004-20231025-en
Target
06564bb4ce93af919244c75636d0ebfa3bcf14760f4e88a05497d977dbbb365e
Size
420KB
MD5
59cd555d902d5e36f6b9ed868d7bc026
SHA1
8d202b802a874a766f36a85841edb0ab2b1bc655
SHA256
06564bb4ce93af919244c75636d0ebfa3bcf14760f4e88a05497d977dbbb365e
SHA512
81522b51a9ad64324efc4d166c2c89c8e59587af8f8cd86946733d0cebb9abc3f38620404444c2000e7d01303a8e29c6e89ca08f046929311a625e2f381fa7fe
SSDEEP
12288:U2/xlWb09AU4Penfn9344exrv4uOZNmA8Seca8:bxlWb0GlPenfnejGZnmA8Sec
Checks for missing Authenticode signature.
resource |
---|
06564bb4ce93af919244c75636d0ebfa3bcf14760f4e88a05497d977dbbb365e |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SSL_set_bio
SSL_ctrl
TLS_client_method
SSL_get_verify_result
SSL_write
SSL_read
SSL_set_verify
SSL_CTX_new
SSL_CTX_use_PrivateKey_file
SSL_CTX_load_verify_locations
SSL_CTX_use_certificate_file
SSL_CTX_set_cert_store
SSL_CTX_free
SSL_new
SSL_shutdown
SSL_CTX_get_cert_store
SSL_get_error
SSL_free
SSL_pending
SSL_connect
OPENSSL_init_ssl
SSL_get1_peer_certificate
X509_STORE_free
BIO_ctrl
X509_NAME_get_text_by_NID
BIO_new_socket
OPENSSL_sk_num
GENERAL_NAMES_free
EVP_MD_CTX_new
ASN1_STRING_length
X509_free
EVP_DigestFinal_ex
EVP_MD_CTX_free
X509_STORE_add_cert
X509_get_subject_name
EVP_sha512
EVP_DigestInit_ex
OPENSSL_sk_value
EVP_sha256
EVP_md5
EVP_DigestUpdate
ASN1_STRING_get0_data
X509_get_ext_d2i
d2i_X509
recv
send
getpeername
inet_pton
WSASocketW
shutdown
select
__WSAFDIsSet
sendto
htons
inet_ntop
recvfrom
bind
ntohl
htonl
WSARecvFrom
WSASendTo
WSAIoctl
WSARecv
WSASend
freeaddrinfo
getnameinfo
WSAGetLastError
WSACleanup
gethostbyname
WSAStartup
inet_addr
getsockname
ntohs
connect
gethostname
closesocket
socket
ioctlsocket
setsockopt
inet_ntoa
getsockopt
getaddrinfo
pthread_cond_signal
pthread_mutex_lock
pthread_cond_wait
pthread_getspecific
pthread_rwlock_rdlock
pthread_rwlock_wrlock
pthread_mutex_unlock
pthread_rwlock_unlock
pthread_key_delete
pthread_self
pthread_setspecific
pthread_mutex_trylock
pthread_mutex_destroy
pthread_mutex_init
pthread_create
pthread_attr_destroy
pthread_attr_init
pthread_attr_setstacksize
pthread_key_create
pthread_attr_setdetachstate
WakeAllConditionVariable
SleepConditionVariableSRW
AcquireSRWLockExclusive
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
ReleaseSRWLockExclusive
OutputDebugStringW
IsDebuggerPresent
InitOnceBeginInitialize
UnhandledExceptionFilter
InitOnceComplete
lstrlenA
lstrcatA
lstrcpyA
lstrcpynA
FindNextFileA
FindFirstFileA
FindClose
ExpandEnvironmentStringsA
UnlockFile
LockFile
GetStdHandle
lstrcmpA
lstrcpynW
SetUnhandledExceptionFilter
GetCurrentProcess
CreateFileA
DeviceIoControl
GetQueuedCompletionStatus
CreateIoCompletionPort
CancelIo
GetComputerNameA
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
ReadFile
GetModuleHandleW
GetProcAddress
GetWindowsDirectoryW
ResetEvent
GetSystemInfo
TerminateThread
SetEvent
MultiByteToWideChar
CreateEventW
GetSystemDirectoryW
LocalAlloc
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
GetModuleFileNameW
ExpandEnvironmentStringsW
EnterCriticalSection
GetExitCodeProcess
QueryPerformanceCounter
FormatMessageA
WideCharToMultiByte
LocalFree
FindResourceW
LoadResource
FindResourceExW
Process32FirstW
QueryPerformanceFrequency
HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
HeapAlloc
HeapDestroy
DeleteCriticalSection
GetProcessHeap
WriteFile
CreateFileW
CloseHandle
WaitNamedPipeW
SizeofResource
WaitForSingleObject
GetVersionExW
CreateToolhelp32Snapshot
Sleep
Process32NextW
LockResource
PostThreadMessageW
GetMessageW
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
OpenServiceW
ChangeServiceConfigW
QueryServiceConfigW
OpenSCManagerW
RegOpenKeyExA
RegCloseKey
CloseServiceHandle
RegEnumKeyExA
RegQueryValueExA
ShellExecuteExW
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
_Mtx_unlock
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Thrd_id
_Thrd_sleep
_Strcoll
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
?id@?$collate@D@std@@2V0locale@2@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xbad_function_call@std@@YAXXZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Throw_Cpp_error@std@@YAXH@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
_Strxfrm
?_Xlength_error@std@@YAXPBD@Z
StrRStrIW
CertGetNameStringW
CertFindCertificateInStore
CertFreeCertificateContext
CertOpenSystemStoreW
CertEnumCertificatesInStore
CertCloseStore
CryptMsgClose
CryptQueryObject
CryptMsgGetParam
GetAdaptersInfo
GetAdaptersAddresses
GetIpForwardTable
GetExtendedUdpTable
CreateIpForwardEntry
GetExtendedTcpTable
SetIpForwardEntry
DeleteIpForwardEntry
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInfoListDetailW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsExW
CM_Get_Device_ID_ExW
MiniDumpWriteDump
__std_terminate
__std_type_info_destroy_list
memcpy
strchr
memchr
strstr
__std_exception_copy
wcschr
wcsstr
wcsrchr
strrchr
memmove
memset
__CxxFrameHandler3
_except_handler4_common
_CxxThrowException
__std_exception_destroy
strncmp
strncpy_s
strncpy
wcsnlen
wcscpy_s
wmemcpy_s
toupper
strlen
isalnum
strpbrk
strtok
_strdup
isspace
strcpy_s
_wcsicmp
isdigit
tolower
_stricmp
__stdio_common_vsnprintf_s
__stdio_common_vswprintf_s
__acrt_iob_func
fgets
__stdio_common_vswprintf
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
ftell
ferror
fopen
__stdio_common_vsscanf
fclose
fseek
fread
rewind
fflush
calloc
_callnewh
realloc
malloc
free
_recalloc
atoi
strtoull
strtod
strtoul
atol
strtol
strerror
_getpid
_invalid_parameter_noinfo
_initterm_e
_initterm
_cexit
_beginthreadex
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
__p___argv
abort
_errno
exit
_localtime32_s
strftime
_time32
_time64
_ctime64
_mktime64
rand
srand
_mbsicmp
rename
_unlink
_stat64i32
getenv
ExtOperation
GetRawKey
InitSdk
QueryInterface
StartVpnCore
StopVpnCore
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ