?CreateFunctionModule@@YAPAVIFunctionModule@@IVCString@@IPAVIFunctionModuleInfo@@@Z
?GetCustInfo@@YAXAAVCString@@AAH@Z
?GetCustUpdateTime@@YAHXZ
?IsKeyNetwork@@YAHXZ
Static task
static1
Behavioral task
behavioral1
Sample
c6bafa422a15e1922e2b669b2f8e74c44b92f19415473bf6407446576fef6293.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c6bafa422a15e1922e2b669b2f8e74c44b92f19415473bf6407446576fef6293.dll
Resource
win10v2004-20231215-en
Target
c6bafa422a15e1922e2b669b2f8e74c44b92f19415473bf6407446576fef6293
Size
3.2MB
MD5
27adec3f8a81a50f721395aba295da6c
SHA1
659838669d06d33464c83329fb85309e9f316ce1
SHA256
c6bafa422a15e1922e2b669b2f8e74c44b92f19415473bf6407446576fef6293
SHA512
df0b1d75fc23f0f3dd94db463ac224ab2515e0266ee5fa79a1f9b17fe161c9266118632f051b11f5730b8bd38dc9ceb40dd9a8b88edbcdcb2c63005e8a0f3d1c
SSDEEP
49152:vjExVWi1TZH8LnVpg0f5buTYRuUyIDIehGkyk2bCWToaauGRS5juQt8Hl/tu:vYmiJZHiHg0fczuDI12a5Jjuntu
Checks for missing Authenticode signature.
resource |
---|
c6bafa422a15e1922e2b669b2f8e74c44b92f19415473bf6407446576fef6293 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetErrorMode
GetSystemDirectoryA
LoadLibraryA
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
ExitProcess
EnumWindows
MessageBoxA
wsprintfA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
free
_except_handler3
malloc
printf
?CreateFunctionModule@@YAPAVIFunctionModule@@IVCString@@IPAVIFunctionModuleInfo@@@Z
?GetCustInfo@@YAXAAVCString@@AAH@Z
?GetCustUpdateTime@@YAHXZ
?IsKeyNetwork@@YAHXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE