GetModuleId
ke_GetFirstObj
ke_GetModuleVersion
ke_GetNextObj
ke_IsModuleExists
ke_ModuleAvailable
ke_NotifyEvent
ke_Rand
ke_RegisterAndLoadNewModule
ke_RestartProcess
ke_TerminateKernel
ke_UnloadModuleRequest
ke_free
ke_malloc
Static task
static1
Behavioral task
behavioral1
Sample
4dbee518f1c92b3dae7fdc6a1bcba6e4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4dbee518f1c92b3dae7fdc6a1bcba6e4.dll
Resource
win10v2004-20231215-en
Target
4dbee518f1c92b3dae7fdc6a1bcba6e4
Size
232KB
MD5
4dbee518f1c92b3dae7fdc6a1bcba6e4
SHA1
309f7323036f04c30e8a61bd3e3e27273f641975
SHA256
f970e2024e0eff0d0b4a2d60a15ede59cf7f3db63083e057eed26b07b33ecd3e
SHA512
e75910ae4a249722a015df271bc476454c957002a890446340055e7971d1abc27efba3dd008e0b89c524492a28fb2c8ee63faa664cc3f685d461b0bd582b7b1e
SSDEEP
6144:s0r+Z1S+Fwhhw0a8VYTZ2rIKBFS0L/B0WSCF:s0rqQhev8VY1uHL/B0y
Checks for missing Authenticode signature.
resource |
---|
4dbee518f1c92b3dae7fdc6a1bcba6e4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord940
ord924
ord860
ord2915
ord5572
ord535
ord858
ord4202
ord922
ord543
ord803
ord6394
ord5450
ord6383
ord540
ord3663
ord3584
ord536
ord939
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord4274
ord815
ord561
ord825
ord823
ord1247
ord798
ord1997
ord2808
ord6407
ord5194
ord533
ord537
ord800
ord1979
ord665
ord5186
ord5440
ord354
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
memmove
rand
calloc
asctime
localtime
sprintf
free
malloc
realloc
srand
time
__CxxFrameHandler
_except_handler3
GetCurrentThreadId
GetLastError
CloseHandle
GetSystemInfo
lstrcpynA
IsBadReadPtr
IsBadCodePtr
GetVersionExA
GetLocaleInfoA
GetModuleHandleA
GetCurrentProcess
ReadProcessMemory
GetModuleFileNameA
CreateThread
CreateFileA
SetUnhandledExceptionFilter
GetTickCount
GlobalMemoryStatus
GetSystemDirectoryA
Sleep
VirtualQuery
LoadResource
SizeofResource
FindResourceA
EnterCriticalSection
lstrlenA
ReadFile
GetFileSize
LoadLibraryExA
SetLastError
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
CreateToolhelp32Snapshot
Module32First
Module32Next
lstrcmpA
GetProcAddress
VirtualProtect
VirtualFree
VirtualAlloc
LoadLibraryA
FreeLibrary
TranslateMessage
SetTimer
wsprintfA
GetMessageA
KillTimer
DispatchMessageA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
PathFileExistsA
GetModuleId
ke_GetFirstObj
ke_GetModuleVersion
ke_GetNextObj
ke_IsModuleExists
ke_ModuleAvailable
ke_NotifyEvent
ke_Rand
ke_RegisterAndLoadNewModule
ke_RestartProcess
ke_TerminateKernel
ke_UnloadModuleRequest
ke_free
ke_malloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ