UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetOptIn
UTStartSession
Static task
static1
Behavioral task
behavioral1
Sample
405a980d7a2528f68c14eed84f34feee.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
405a980d7a2528f68c14eed84f34feee.dll
Resource
win10v2004-20231215-en
Target
405a980d7a2528f68c14eed84f34feee
Size
168KB
MD5
405a980d7a2528f68c14eed84f34feee
SHA1
ff701fa72f590f51a6e497d2b105c9e8372f5f91
SHA256
9207395ac8c0f95a7f4776113236d8bf8cdeb1e339d0f8658bc21fd67139b847
SHA512
37d2fbabbe4d0c98e8b61082fc5e5828b2f3bef507ae7c823fe28a8b22415eb7b8a23f029a11fb6992c3238762119181480646b4145658fe4cd9fd2427644970
SSDEEP
3072:g5SZHI9O8JxvlkOgWKEHdVaiGcmq+OVGLi:f8O8blkOgWJ9VaidmqBVr
Checks for missing Authenticode signature.
resource |
---|
405a980d7a2528f68c14eed84f34feee |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
UploadLog
GetAgentPath
AgentExists
GetStatus
GetLogDirectory
MultiByteToWideChar
InterlockedExchange
WideCharToMultiByte
CloseHandle
CreateFileA
WriteFile
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
CreateThread
GetDiskFreeSpaceA
GetLocaleInfoA
LoadResource
GetVersionExA
LockResource
SizeofResource
FindResourceA
GetSystemInfo
FindResourceExA
FormatMessageA
GlobalMemoryStatusEx
FindClose
FindFirstFileA
DeleteFileA
VerLanguageNameA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
InterlockedCompareExchange
FindNextFileA
HeapDestroy
RaiseException
GetThreadLocale
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnregisterClassA
RegOpenKeyA
RegEnumValueA
RegOpenCurrentUser
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
RegCreateKeyExA
CryptDestroyHash
CryptGetHashParam
RegEnumKeyExA
CryptHashData
CryptCreateHash
RegCloseKey
CryptAcquireContextA
RegDeleteValueA
RegDeleteKeyA
CoInitialize
CoCreateGuid
CoCreateInstance
CoUninitialize
VariantClear
VariantInit
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
PathFileExistsA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
__CxxFrameHandler3
_CxxThrowException
memset
memcpy
__clean_type_info_names_internal
??3@YAXPAX@Z
sscanf_s
_invalid_parameter_noinfo
memmove_s
malloc
?what@exception@std@@UBEPBDXZ
wcstombs_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
sprintf_s
free
??0exception@std@@QAE@ABV01@@Z
??_V@YAXPAX@Z
rename
strtok_s
_time64
strncpy_s
_ismbcspace
_mbsinc
_mbsstr
memcpy_s
_mbslwr_s
strftime
getenv_s
_gmtime64_s
_vscprintf
vsprintf_s
strnlen
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetOptIn
UTStartSession
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE