ThreadFunction
shellcode
Static task
static1
Behavioral task
behavioral1
Sample
768a70cfbe9d0f3ce1f07fe4d86f1ccc.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
768a70cfbe9d0f3ce1f07fe4d86f1ccc.dll
Resource
win10v2004-20231215-en
Target
768a70cfbe9d0f3ce1f07fe4d86f1ccc
Size
45KB
MD5
768a70cfbe9d0f3ce1f07fe4d86f1ccc
SHA1
a7a7f4e5fa516ab5f4321a46517297d0b6f52064
SHA256
04d8ad8c780bbcfd091a4411b888042bed7506be221d129ba26f9d2ccd24f7b9
SHA512
5fb1b7d902158219a0a396399874cf8fa4b93082627e6a473ec938bad55dbe560572ce4a9a63bfa16b947f67ec6a7a8a10adfaddca08e749881660a7de8c026e
SSDEEP
768:195Y5wswEeuAf64HoLYKnNsuITIUu1wh154GKjR7N8IqoS:1Px7ly4HovnNyu1+bKjx+IX
Checks for missing Authenticode signature.
resource |
---|
768a70cfbe9d0f3ce1f07fe4d86f1ccc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAllocEx
VirtualProtect
VirtualQuery
WriteProcessMemory
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
realloc
signal
strlen
strncmp
vfprintf
ThreadFunction
shellcode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ