AcsHlpAttemptConnection
AcsHlpNbConnection
AcsHlpNoteNewConnection
WSAttemptAutodialAddr
WSAttemptAutodialName
WSNoteSuccessfulHostentLookup
Static task
static1
Behavioral task
behavioral1
Sample
41038a579d168c9fa890b0dd8c567e23.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41038a579d168c9fa890b0dd8c567e23.dll
Resource
win10v2004-20231215-en
Target
41038a579d168c9fa890b0dd8c567e23
Size
10KB
MD5
41038a579d168c9fa890b0dd8c567e23
SHA1
0a10c496ff233fca09c6c19b23dee198ebdf44cd
SHA256
54b655b6705a69d7681eb6bb136edcfce8a5ba0f0d91cb3c3d76ad9c370a42a4
SHA512
02c2272fa82a620586d4721fabf0e96329e3cfd28eeb592d02fdf70d720b8ce52398bb8b8d1bfce2383a7871741e63b97beabe7d97ff9cf918974ac8077deb6a
SSDEEP
96:VcUSriMMr7dE5j298UmEhCE39kxZWt1pkUi3kiOlyp0LJPEWvZM3IWwGmab:VcUJ4j298tE8I+g6UJiqypKMW2YWQab
Checks for missing Authenticode signature.
resource |
---|
41038a579d168c9fa890b0dd8c567e23 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
LocalAlloc
GetCurrentProcessId
WaitForSingleObject
CloseHandle
CreateEventW
LocalFree
LoadLibraryW
WideCharToMultiByte
FreeLibrary
GetLastError
GetProcAddress
DisableThreadLibraryCalls
free
_initterm
malloc
_strlwr
_adjust_fdiv
NtCreateFile
RtlInitUnicodeString
NtDeviceIoControlFile
inet_addr
AcsHlpAttemptConnection
AcsHlpNbConnection
AcsHlpNoteNewConnection
WSAttemptAutodialAddr
WSAttemptAutodialName
WSNoteSuccessfulHostentLookup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE