AcsHlpAttemptConnection
AcsHlpNbConnection
AcsHlpNoteNewConnection
WSAttemptAutodialAddr
WSAttemptAutodialName
WSNoteSuccessfulHostentLookup
Static task
static1
Behavioral task
behavioral1
Sample
008161b9833ed60e5e8bf7653c389bed.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
008161b9833ed60e5e8bf7653c389bed.dll
Resource
win10v2004-20231215-en
Target
008161b9833ed60e5e8bf7653c389bed
Size
9KB
MD5
008161b9833ed60e5e8bf7653c389bed
SHA1
0196f1e9ec7d469b1a49de0d7312a99543d2b95d
SHA256
d7dcc58f689408553a1e81367e7636f7ec4cf922a424a89c4d215ee85343e8c4
SHA512
a57b6c831405ccbb5c4ba13650f0f4894a68748498845fd96d4153835c7431542091301d65430c8843ae652ee19fa2d134f70a626336ad33bcb0df1a9a2e9406
SSDEEP
96:q1V7dR7uwEU+hCT3GrxZ4MUtPNlz0MdG8EWvdM3IWwG34b:kuwEt8rsTUtPLzKNWSYWF4b
Checks for missing Authenticode signature.
resource |
---|
008161b9833ed60e5e8bf7653c389bed |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
LocalAlloc
GetCurrentProcessId
WaitForSingleObject
CloseHandle
CreateEventW
LocalFree
LoadLibraryW
WideCharToMultiByte
FreeLibrary
GetLastError
GetProcAddress
DisableThreadLibraryCalls
free
_initterm
malloc
_strlwr
_adjust_fdiv
NtCreateFile
RtlInitUnicodeString
NtDeviceIoControlFile
inet_addr
AcsHlpAttemptConnection
AcsHlpNbConnection
AcsHlpNoteNewConnection
WSAttemptAutodialAddr
WSAttemptAutodialName
WSNoteSuccessfulHostentLookup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE