GetInstallDetailsPayload
SignalInitializeCrashReporting
Behavioral task
behavioral1
Sample
78191e7dc1ccb6f81e5b956981b9948ce069dc70db72e51ad49702915f2d179c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
78191e7dc1ccb6f81e5b956981b9948ce069dc70db72e51ad49702915f2d179c.dll
Resource
win10v2004-20231222-en
Target
78191e7dc1ccb6f81e5b956981b9948ce069dc70db72e51ad49702915f2d179c
Size
11KB
MD5
498f9d0fcb4a58a665dd9df615c155f1
SHA1
450f320451b5b4b1521f2fb256df633e85a5d87a
SHA256
78191e7dc1ccb6f81e5b956981b9948ce069dc70db72e51ad49702915f2d179c
SHA512
7b58d6a54c413ee31d52c1c9774457dd30aad261d7ee65810f251f5902e600b7c80cee542d621367cbde8d524fb1ad0c97ca5e7fddddffeac452e5502997099a
SSDEEP
192:G6N/aExNLKAfSnytfKkNXbouSWaFP4Lycn:fnfSylLR8Gf
cobaltstrike
http://192.168.198.128:4445/DXVk
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0)
Checks for missing Authenticode signature.
resource |
---|
78191e7dc1ccb6f81e5b956981b9948ce069dc70db72e51ad49702915f2d179c |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
VirtualAlloc
CreateThread
WaitForSingleObject
RtlLookupFunctionEntry
RtlCaptureContext
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
RtlVirtualUnwind
__std_type_info_destroy_list
__C_specific_handler
memcpy
memset
_execute_onexit_table
_initialize_onexit_table
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment
GetInstallDetailsPayload
SignalInitializeCrashReporting
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ