SoDAShareFinish
SoDAShareGetIPCPort
SoDAShareSetRegPath
SoDAShareSetUserID
SoDAShareStart
Static task
static1
Behavioral task
behavioral1
Sample
1061c5ec7ec5eb7bd056e29ec88daea5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1061c5ec7ec5eb7bd056e29ec88daea5.exe
Resource
win10v2004-20231222-en
Target
1061c5ec7ec5eb7bd056e29ec88daea5
Size
212KB
MD5
1061c5ec7ec5eb7bd056e29ec88daea5
SHA1
6634729df4beef1d32edd50e398729e9112fce7b
SHA256
a448be1b387a416fe1f54a2b9c8d2227a9684c96e934683df1a86bb046864fb7
SHA512
0f0f31f80ca75dbd03f876e34c6f522636f6f6f23b231d28485941182be70646c8b67b7d246093e01ff4969b112ca0d77de33d2606fc79e6277821960132a950
SSDEEP
3072:MaDb9UCXH1ZaGKD4hHgR6CCIHTBflamLl/iun7KBL4/Pnn7Y:MalUCXH3zKIxIHTBNvLlteJIP7Y
Checks for missing Authenticode signature.
resource |
---|
1061c5ec7ec5eb7bd056e29ec88daea5 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateProcessA
GetCurrentDirectoryA
CopyFileA
Sleep
DeleteFileA
SetFileAttributesA
GetShortPathNameA
GetLastError
LoadLibraryA
GetProcAddress
GetProcessHeap
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetTickCount
GlobalFree
GlobalAlloc
SetLastError
HeapReAlloc
lstrcpyA
GetSystemDirectoryA
lstrcatA
DeviceIoControl
CreateMutexA
GetModuleFileNameA
MultiByteToWideChar
GetCurrentProcessId
OpenProcess
CloseHandle
FreeLibrary
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
OutputDebugStringA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalAlloc
LocalFree
lstrlenA
CreateThread
AllocConsole
GetStdHandle
MoveFileExA
WriteFile
GetCurrentThreadId
GetFileSize
CreateFileA
ReadFile
SetFilePointer
SuspendThread
ResumeThread
WaitForSingleObject
TlsFree
TlsGetValue
TlsSetValue
SetEvent
TlsAlloc
CreateEventA
GetLocalTime
PostThreadMessageA
DefWindowProcA
SetTimer
UpdateWindow
CreateWindowExA
RegisterClassExA
PeekMessageA
IsCharAlphaNumericA
wsprintfA
FindWindowA
KillTimer
GetMessageA
PostQuitMessage
DispatchMessageA
TranslateMessage
DestroyWindow
DeleteObject
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
CoInitializeEx
CoUninitialize
CoCreateInstance
SysFreeString
SysAllocString
SysStringLen
SHSetValueA
PathRenameExtensionA
PathFindExtensionA
SHGetValueA
PathFileExistsA
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??Bid@locale@std@@QAEIXZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?to_char_type@?$char_traits@D@std@@SADABH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?width@ios_base@std@@QBEHXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Bios_base@std@@QBEPAXXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Nomemory@std@@YAXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
_mbsstr
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
malloc
free
_errno
strcmp
_stricmp
_write
_lseek
_read
strerror
_purecall
memset
_except_handler3
_vsnprintf
isxdigit
sprintf
memmove
toupper
strstr
strlen
memcpy
memcmp
isdigit
atol
_callnewh
__security_error_handler
??1type_info@@UAE@XZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
_open
_close
_fstat
_snprintf
__CxxFrameHandler
??3@YAXPAX@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
_CxxThrowException
printf
_mbsnbcpy
_mbsupr
strncpy
gethostbyname
sendto
bind
WSAStartup
send
socket
recv
listen
ntohs
WSACleanup
inet_ntoa
htons
connect
inet_addr
closesocket
shutdown
getsockname
accept
ioctlsocket
WSAGetLastError
InternetOpenA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetCloseHandle
SoDAShareFinish
SoDAShareGetIPCPort
SoDAShareSetRegPath
SoDAShareSetUserID
SoDAShareStart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE