AcsHlpAttemptConnection
AcsHlpNbConnection
AcsHlpNoteNewConnection
WSAttemptAutodialAddr
WSAttemptAutodialName
WSNoteSuccessfulHostentLookup
Static task
static1
Behavioral task
behavioral1
Sample
54796795843949b5bb39f16b1489d8e3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54796795843949b5bb39f16b1489d8e3.dll
Resource
win10v2004-20231215-en
Target
54796795843949b5bb39f16b1489d8e3
Size
9KB
MD5
54796795843949b5bb39f16b1489d8e3
SHA1
5a74d037a572ad37d22686b9b6d901746bc5d8f1
SHA256
48a6082f12c00050d0e2918a50b5c9b70e75e0fcd0ba66d0b085ea3e66f3e399
SHA512
22d405bef147bb2231715fb0692aff657a4c9588dcfe91f4d47efff7ac28181c6a06cfa6736ad2ec6f92334e91ad7b280d3927e644142949eb69a2c5e2739bd7
SSDEEP
96:q1V7dR7uwEU+hCT3GrxZ4MUtPNlz0MdG8EWvdM3IWwG34b7:kuwEt8rsTUtPLzKNWSYWF4b
Checks for missing Authenticode signature.
resource |
---|
54796795843949b5bb39f16b1489d8e3 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
LocalAlloc
GetCurrentProcessId
WaitForSingleObject
CloseHandle
CreateEventW
LocalFree
LoadLibraryW
WideCharToMultiByte
FreeLibrary
GetLastError
GetProcAddress
DisableThreadLibraryCalls
free
_initterm
malloc
_strlwr
_adjust_fdiv
NtCreateFile
RtlInitUnicodeString
NtDeviceIoControlFile
inet_addr
AcsHlpAttemptConnection
AcsHlpNbConnection
AcsHlpNoteNewConnection
WSAttemptAutodialAddr
WSAttemptAutodialName
WSNoteSuccessfulHostentLookup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE