_STWNDCloseConnection@4
_STWNDDeleteStateItem@4
_STWNDEndOfRequest@4
_STWNDGetLocalAddress@8
_STWNDGetLocalPort@4
_STWNDGetRemoteAddress@8
_STWNDGetRemotePort@4
_STWNDIsClientConnected@4
_STWNDSendResponse@24
Static task
static1
Behavioral task
behavioral1
Sample
e2df083bdb489cfe2b6d6b86254e82f7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e2df083bdb489cfe2b6d6b86254e82f7.exe
Resource
win10v2004-20231215-en
Target
e2df083bdb489cfe2b6d6b86254e82f7
Size
425KB
MD5
e2df083bdb489cfe2b6d6b86254e82f7
SHA1
4398747e094b6c80ea7e798d264a5d512e2d631d
SHA256
aad502fe715f160bc9e62c03cc0c4c6962d57c453d453b0c9287bb9502ed2d8d
SHA512
efcd4be49f0c1c04c3c64a4b4087450fc0863f9a72d4e4c2a874270d5fdbbb4e3a06e9f426f18352aba7886578c6a76044b7c511b81fd81c11187df581a0a120
SSDEEP
6144:oRamRomeEt5aFLS601VCnQyIum1DQ88UexRKRBwBPTWn78QlNICIA6JHoRG8:AomRb0K14pm1DFSKwPSn7nvZjv
Checks for missing Authenticode signature.
resource |
---|
e2df083bdb489cfe2b6d6b86254e82f7 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
HeapFree
FreeLibrary
GetProcAddress
SetEvent
WaitForSingleObject
GetSystemInfo
CloseHandle
CreateEventW
SetWaitableTimer
Sleep
CreateThread
FormatMessageW
CreateWaitableTimerW
SetConsoleCtrlHandler
GetLastError
InterlockedExchange
InterlockedCompareExchange
SwitchToThread
LoadLibraryW
FileTimeToLocalFileTime
InterlockedIncrement
InterlockedDecrement
GetSystemTimeAsFileTime
lstrlenW
FileTimeToSystemTime
WideCharToMultiByte
HeapDestroy
EncodePointer
DecodePointer
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
HeapReAlloc
GetSystemDirectoryW
GetVersionExW
MultiByteToWideChar
HeapAlloc
GetCurrentProcess
HeapCreate
GetProcessAffinityMask
_fmode
_commode
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_except_handler4_common
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_purecall
strncmp
__winitenv
_initterm
__setusermatherr
_configthreadlocale
_cexit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
memset
_itoa_s
wcsncpy_s
wcscpy_s
_vsnwprintf
memcpy
strtol
strstr
strchr
_initterm_e
_exit
GetAcceptExSockaddrs
AcceptEx
CoUninitialize
CoInitializeEx
select
setsockopt
recv
bind
WSAAddressToStringA
WSASend
WSARecv
WSAGetOverlappedResult
ntohs
inet_ntoa
WSACleanup
WSAStartup
WSASocketW
WSAGetLastError
closesocket
listen
htons
htonl
ClrCreateManagedInstance
XspLogEvent
InitializeLibrary
AspnetLoadResourceDLL
PerfCounterInitialize
LoadLibraryUsingFullPath
PrintResourceString
AttachHandleToThreadPool
GetXSPHeap
_STWNDCloseConnection@4
_STWNDDeleteStateItem@4
_STWNDEndOfRequest@4
_STWNDGetLocalAddress@8
_STWNDGetLocalPort@4
_STWNDGetRemoteAddress@8
_STWNDGetRemotePort@4
_STWNDIsClientConnected@4
_STWNDSendResponse@24
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ