Attach
Command
Configure
Detach
GetInfoData
GetInfoSize
SetHost
ShutDown
Static task
static1
Behavioral task
behavioral1
Sample
b744e4e7f825b450afae8773e94725a358f3877f8de5d233c37cd5a5671704cb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b744e4e7f825b450afae8773e94725a358f3877f8de5d233c37cd5a5671704cb.dll
Resource
win10v2004-20231215-en
Target
b744e4e7f825b450afae8773e94725a358f3877f8de5d233c37cd5a5671704cb
Size
317KB
MD5
347f884c3deabc3fc9c0a5404e2d433c
SHA1
8448c513a380bf6ed7a735ff82bbc8e6ff501812
SHA256
b744e4e7f825b450afae8773e94725a358f3877f8de5d233c37cd5a5671704cb
SHA512
57857ede6c6025b9831752c016e0526c43084e08fe050127bedb6a13007270511a753a09e0002f5ab871b1e914ea969c169c8a487973b17ef075a7ee174fb6ca
SSDEEP
6144:lPDx+7NkSMYLPA4P0cmI1b8oS83ebohAOuI82TA:ll+7NMYLrP0cpb8sh8F2c
Checks for missing Authenticode signature.
resource |
---|
b744e4e7f825b450afae8773e94725a358f3877f8de5d233c37cd5a5671704cb |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResetEvent
WaitForSingleObject
CreateEventW
CreateFileW
WriteFile
GetTickCount
SetLastError
ReleaseMutex
CreateMutexW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
CreateThread
GetCurrentThreadId
OpenThread
GetExitCodeThread
SuspendThread
ResumeThread
GetThreadContext
GetCurrentThread
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualQuery
GetCurrentProcessId
ExitProcess
SwitchToThread
FreeLibraryAndExitThread
MoveFileW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
SetFilePointerEx
GetStringTypeW
GetProcessHeap
CloseHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
DecodePointer
GetFileType
GetStdHandle
HeapAlloc
HeapFree
GetModuleHandleExW
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
K32EnumProcessModules
GetCurrentProcess
SetEvent
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
GetLastError
EnableWindow
BringWindowToTop
ShowWindow
SendMessageW
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
GetWindowThreadProcessId
PostMessageW
PeekMessageW
DispatchMessageW
GetWindow
GetClassNameW
SetWindowLongW
GetWindowLongW
FindWindowExW
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetWindowPos
SendMessageTimeoutW
IsWindowEnabled
IsWindowVisible
IsWindow
SymInitialize
SymGetLineFromAddr64
SymCleanup
SymSetOptions
SymFromAddr
Attach
Command
Configure
Detach
GetInfoData
GetInfoSize
SetHost
ShutDown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ