??0ParseXml@@QAE@ABV0@@Z
??4ParseXml@@QAEAAV0@ABV0@@Z
_set_stop_event@4
_set_ukzj_logpath@4
_uk_clear@4
_uk_op_ret@4
_uk_op_size@4
_uk_operate@8
set_stop_event
set_ukzj_logpath
uk_clear
uk_op_ret
uk_op_size
uk_operate
Static task
static1
Behavioral task
behavioral1
Sample
d417e0635da59349dcb853a465bec1b77505517677ef154db25c4398a2ce61d5.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
d417e0635da59349dcb853a465bec1b77505517677ef154db25c4398a2ce61d5.dll
Resource
win10v2004-20231023-en
Target
d417e0635da59349dcb853a465bec1b77505517677ef154db25c4398a2ce61d5
Size
2.5MB
MD5
28dad57cb431e449abc37b6a8ab86c1c
SHA1
90df276c86a526f3cd3a8be401e7f3a313fc6ee1
SHA256
d417e0635da59349dcb853a465bec1b77505517677ef154db25c4398a2ce61d5
SHA512
9572ac62a9097b41fbc2e6001dbe2397acd4818d94e0378e4d7866f83053ba8b28af3f6bc5ffcf30ddaef2060ef743b1ca957b89190c559bb6a5ee1e34a3e414
SSDEEP
49152:ZTMTcIiKGADXDN4a0D7vZ+AGxHT97ws41vjl2+:ZGcduXDN4a0D7vZ+AGn7wsM
Checks for missing Authenticode signature.
resource |
---|
d417e0635da59349dcb853a465bec1b77505517677ef154db25c4398a2ce61d5 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualQuery
CreateFileA
CloseHandle
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
GetCurrentProcessId
WriteProcessMemory
OpenMutexA
LoadLibraryA
SetDllDirectoryA
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
SetEvent
GetTickCount
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetNativeSystemInfo
GetPrivateProfileStringA
WritePrivateProfileStringA
WritePrivateProfileSectionA
ReadFile
CreatePipe
WaitForSingleObject
GetLocalTime
GetStartupInfoA
GetCurrentThreadId
OutputDebugStringW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
LocalFree
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
WriteFile
SetFilePointer
GetFileSize
ExpandEnvironmentStringsA
WaitForMultipleObjects
PeekNamedPipe
GetFileType
GetStdHandle
VerifyVersionInfoA
GetSystemDirectoryA
VerSetConditionMask
SleepEx
FreeLibrary
SetLastError
GetFileAttributesA
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateDirectoryA
GetTempPathA
GetProcAddress
GetModuleHandleA
CreateProcessA
GetModuleFileNameA
UnregisterClassA
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
RegCloseKey
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
RegQueryValueExA
RegOpenKeyExA
CryptEncrypt
CoInitialize
CLSIDFromProgID
CoCreateInstance
CoUninitialize
SysAllocStringByteLen
SysStringByteLen
SysFreeString
GetErrorInfo
SysAllocString
VariantClear
VariantInit
VariantChangeType
SetErrorInfo
CreateErrorInfo
eutil8
eutil3
getsockopt
htons
ntohs
setsockopt
socket
WSAIoctl
getaddrinfo
recvfrom
sendto
accept
listen
ioctlsocket
gethostname
closesocket
bind
send
htonl
ntohl
connect
getpeername
freeaddrinfo
WSAStartup
WSACleanup
WSAGetLastError
__WSAFDIsSet
select
WSASetLastError
recv
getsockname
CertFreeCertificateContext
ord41
ord143
ord46
ord211
ord60
ord45
ord50
ord22
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord26
??1ParseXml@@QAE@XZ
??0ParseXml@@QAE@XZ
?QueryOrder_Anyone@ParseXml@@QAEHPAUSPBM_Data@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11H@Z
?QueryTotalVersion@ParseXml@@QAEHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
getSize
QRGeneratorBit
PostAndRecvEx
??1CSm2Clt@@QAE@XZ
?Err2Str@CSm2Clt@@QAEPADH@Z
?OpenUsbkey@CSm2Clt@@QAEHPAD00@Z
??0CSm2Clt@@QAE@XZ
?ClientHello@CSm2Clt@@QAEHPAEAAKK@Z
?CloseUsbkey@CSm2Clt@@QAEHXZ
?ChangePin@CSm2Clt@@QAEHPAD0@Z
?VerifyPin@CSm2Clt@@QAEHPAD@Z
?ReadCert@CSm2Clt@@QAEHPAEAAKK@Z
?ClientAuth@CSm2Clt@@QAEHPAEK0AAK@Z
?SignData@CSm2Clt@@QAEHPAEK0AAKKK@Z
?VerifySign@CSm2Clt@@QAEHPAEK0K0KK@Z
GetCertInfo
SSLPostAndRecv
GetServerInfo
ConnectServer
SetProxyServerParam
fnSetParam
SSLClose
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??1ios_base@std@@UAE@XZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?uncaught_exception@std@@YA_NXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
MiniDumpWriteDump
_CxxThrowException
memmove
strrchr
__CxxFrameHandler3
__std_exception_destroy
memcpy
__std_exception_copy
strchr
strstr
memchr
_purecall
_except_handler4_common
__std_type_info_destroy_list
memset
__std_terminate
__sys_nerr
_initterm_e
_initterm
system
_cexit
_errno
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_beginthreadex
_configure_narrow_argv
_invalid_parameter_noinfo
_getpid
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
terminate
abort
strerror
_endthreadex
malloc
free
_recalloc
calloc
_callnewh
realloc
srand
rand
qsort
atoi
_atoi64
_i64toa
atol
strtol
_itoa
strtoll
strtoul
atoll
_ecvt_s
strtod
_ui64toa
atof
_ecvt
_wfopen
fread
fseek
__acrt_iob_func
_get_stream_buffer_pointers
fclose
fflush
fgetc
fgetpos
fputc
_lseeki64
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
fputs
fgets
ftell
ferror
fopen
_read
_write
_close
_open
_ftelli64
__stdio_common_vsnprintf_s
_fstat64
_stat64
_mkdir
_lock_file
_unlock_file
_wsplitpath
_access
_localtime64
clock
_mktime64
_difftime64
_time64
_gmtime64
_getsystime
ispunct
strncpy
iswspace
strcpy_s
_strdup
isdigit
_wcsicmp
strncmp
isprint
_stricmp
toupper
tolower
isalpha
iscntrl
strtok
isxdigit
strpbrk
isspace
isalnum
islower
isupper
isgraph
_mbsrchr
floor
ceil
_CIfmod
_except1
round
_libm_sse2_pow_precise
_isnan
_finite
getenv
___mb_cur_max_func
??0ParseXml@@QAE@ABV0@@Z
??4ParseXml@@QAEAAV0@ABV0@@Z
_set_stop_event@4
_set_ukzj_logpath@4
_uk_clear@4
_uk_op_ret@4
_uk_op_size@4
_uk_operate@8
set_stop_event
set_ukzj_logpath
uk_clear
uk_op_ret
uk_op_size
uk_operate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE