GetWtDefInfoFromETradeXML_More
GetXUserHardInfo
ProcessHostFromETradeXML
Static task
static1
Behavioral task
behavioral1
Sample
bc9cf2d9e2706e8c7d3e3209821723d1e66dbb51c93e88efa5708328bc738fe9.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
bc9cf2d9e2706e8c7d3e3209821723d1e66dbb51c93e88efa5708328bc738fe9.dll
Resource
win10v2004-20231127-en
Target
bc9cf2d9e2706e8c7d3e3209821723d1e66dbb51c93e88efa5708328bc738fe9
Size
10.1MB
MD5
e4c17ad2b56825f5b787b8de709f8c62
SHA1
06f3e1282f07a10500635b8df561a0dc5eecb8e8
SHA256
bc9cf2d9e2706e8c7d3e3209821723d1e66dbb51c93e88efa5708328bc738fe9
SHA512
1e0121688181e79d0f6e51d4fa14d1be69df4581c7a991b6b3d419f50504f8bab35a1b22f17246f26b8042effc5090caa700dbdacf5fb5ebf835fed78d439305
SSDEEP
196608:AjOo4gvfs70LgRAZK4GirnNfYENVdnsCPsInHowMeLzwFcIMY+nozjIiZtVe:eOeEICAAf6nWujnfxIfuDaZtVe
Checks for missing Authenticode signature.
resource |
---|
bc9cf2d9e2706e8c7d3e3209821723d1e66dbb51c93e88efa5708328bc738fe9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SafeArrayPtrOfIndex
RegQueryValueExA
RegQueryValueExA
GetKeyboardType
CreateWindowExA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
GetACP
TlsSetValue
GetVersionExA
GetVersion
Sleep
AddVectoredExceptionHandler
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
UnrealizeObject
VerQueryValueA
InternetReadFile
SaveTdxIni
_TrackMouseEvent
WTSSendMessageW
GetWtDefInfoFromETradeXML_More
GetXUserHardInfo
ProcessHostFromETradeXML
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ