asw_process_storage_allocate_connector
asw_process_storage_deallocate_connector
on_avast_dll_unload
onexit_register_connector_avast_2
Static task
static1
Behavioral task
behavioral1
Sample
227db773b74c2ac07073de0705e2df2c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
227db773b74c2ac07073de0705e2df2c.exe
Resource
win10v2004-20231215-en
Target
227db773b74c2ac07073de0705e2df2c
Size
4.8MB
MD5
227db773b74c2ac07073de0705e2df2c
SHA1
3e53ad86b47567220ace325c04a948c70f7d1bd6
SHA256
e9e3ff0ecdf32a0c3cf41963a8ffeb1d18978a9770ae5655ee7776df53926bde
SHA512
844b3045d54e5c88ee586cbf347f0b1276e66e4236d28f02706f2203d9b0d92a7f10feb604c56e132e37fc7ca9a4437f13fcb9817beaa4484b0bbc842d6bb968
SSDEEP
98304:ctghSGdDfABW0RUCDTTNAGDmTH1LXINNyVhm8H9gcS4dhx008:ESDfBUJAUmTZXINsp9gV4dhx0
Checks for missing Authenticode signature.
resource |
---|
227db773b74c2ac07073de0705e2df2c |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
RtlNtStatusToDosError
RtlUnwind
DuplicateHandle
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
SetStdHandle
CloseHandle
SetLastError
GetLastError
CreateFileW
DeviceIoControl
FindClose
WideCharToMultiByte
FindFirstFileW
RemoveDirectoryW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
GetModuleHandleW
GetProcAddress
CreateProcessW
ResumeThread
GetCurrentThread
HeapAlloc
GetProcessHeap
GetSystemDirectoryW
lstrcatW
GetModuleHandleA
LocalFree
CreateEventW
GetExitCodeProcess
GetCurrentProcess
FindResourceW
SizeofResource
LockResource
LoadResource
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
SetEvent
CreateThread
TerminateThread
GetLocaleInfoW
MultiByteToWideChar
Sleep
LoadLibraryExW
FreeLibrary
FileTimeToSystemTime
GetCurrentThreadId
GetUserDefaultLangID
GetCommandLineW
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetFileSizeEx
ReadFile
GetFileTime
GetNativeSystemInfo
GetPrivateProfileStringW
IsProcessorFeaturePresent
FormatMessageW
SetFilePointerEx
TerminateProcess
WaitForMultipleObjects
CompareStringW
ResetEvent
CreateSemaphoreW
ReleaseSemaphore
InitializeCriticalSectionEx
HeapFree
TryEnterCriticalSection
GetSystemInfo
GetVersionExW
GetTickCount
QueryPerformanceCounter
ExpandEnvironmentStringsW
GetModuleFileNameW
GetShortPathNameW
GetFileAttributesW
GetWindowsDirectoryW
GetProcessAffinityMask
GetLongPathNameW
VirtualAlloc
VirtualFree
VirtualProtect
HeapDestroy
HeapReAlloc
GlobalMemoryStatusEx
GetExitCodeThread
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetDriveTypeW
SetFilePointer
WriteFile
DeleteFileW
SetFileAttributesW
GetFileSize
SetEndOfFile
MoveFileExW
LockFileEx
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WriteConsoleW
GetFileInformationByHandle
SetFileTime
GetFullPathNameW
CreateDirectoryW
GetCurrentDirectoryW
FindFirstFileExW
FindNextFileW
QueryDosDeviceW
GetEnvironmentVariableW
SetEnvironmentVariableW
WriteProcessMemory
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpiA
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetVersion
HeapSize
RaiseException
DecodePointer
FlushFileBuffers
OutputDebugStringA
GetModuleHandleExW
GetThreadId
UnlockFileEx
SetFileInformationByHandle
GetDiskFreeSpaceExW
FreeResource
K32GetMappedFileNameW
VirtualQuery
FindFirstVolumeW
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
FindVolumeClose
IsWow64Process
GetSystemTimes
GetTickCount64
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
ExitProcess
GetStdHandle
SystemTimeToTzSpecificLocalTime
LoadLibraryExA
WaitForSingleObjectEx
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
FormatMessageA
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
EncodePointer
LCMapStringEx
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
InterlockedPushEntrySList
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
ExitThread
FreeLibraryAndExitThread
GetFileType
PeekNamedPipe
asw_process_storage_allocate_connector
asw_process_storage_deallocate_connector
on_avast_dll_unload
onexit_register_connector_avast_2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ