BoneFoot
Countinstrument
During
Largecamp
Static task
static1
Behavioral task
behavioral1
Sample
fc77868aae55037dccd9e6734c0bda1f.dll
Resource
win7-20231129-en
Target
fc77868aae55037dccd9e6734c0bda1f
Size
820KB
MD5
fc77868aae55037dccd9e6734c0bda1f
SHA1
625c1d5de4fb7e5fae3440892e122685b004f88e
SHA256
dbe3468fbf17c02a99b49ee5fca4837811e4bf8e2877374423c2d4512f060569
SHA512
c494179fb0bd6cfc56e19795830c4ea1afdc1eda4c70ae0420c9e967a4d4c7425023efdb41d7e5bd8ac27b3ff0cb10e7212929d7d27794f2d0575316a9bea327
SSDEEP
24576:nO6c3oCrVA7bEK7mJaW2eX8TvE81gIzsk6EzCUfk7Ou:duVeEK7mmeX8TBgIzsk6hUf4h
Checks for missing Authenticode signature.
Processes:
resource |
---|
fc77868aae55037dccd9e6734c0bda1f |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualProtectEx
GetCurrentProcess
GetSystemTimeAsFileTime
GetLocalTime
CreateSemaphoreW
LoadLibraryW
CreateProcessW
GetEnvironmentVariableW
GetSystemDirectoryW
GetWindowsDirectoryW
CreateFileW
SetFileAttributesW
WaitForSingleObjectEx
OutputDebugStringW
OutputDebugStringA
CloseHandle
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetModuleFileNameW
GetCurrentThread
HeapFree
HeapAlloc
GetACP
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetStdHandle
GetFileType
SetConsoleCtrlHandler
GetTimeZoneInformation
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
CreateThread
OleSetContainedObject
OleUninitialize
OleInitialize
ImageRvaToSection
ImageRvaToVa
MapDebugInformation
MakeSureDirectoryPathExists
SymUnloadModule
SymUnloadModule64
ImagehlpApiVersionEx
ImagehlpApiVersion
UnDecorateSymbolName
TouchFileTimes
ImageUnload
MapFileAndCheckSumA
MapAndLoad
BoneFoot
Countinstrument
During
Largecamp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ