AcsHlpAttemptConnection
AcsHlpNbConnection
AcsHlpNoteNewConnection
WSAttemptAutodialAddr
WSAttemptAutodialName
WSNoteSuccessfulHostentLookup
Static task
static1
Behavioral task
behavioral1
Sample
4fca0c733dafa524291064c60db66f3b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4fca0c733dafa524291064c60db66f3b.dll
Resource
win10v2004-20231222-en
Target
4fca0c733dafa524291064c60db66f3b
Size
9KB
MD5
4fca0c733dafa524291064c60db66f3b
SHA1
25ed50388e40b468d6a4bb8fbcc6c63e81553f7c
SHA256
66ad88161126120b388546d1066a9cead8d5d8e093b2e447f1c55dadcb2d5039
SHA512
85bac3fbe8f0bf1a7d1d454e2326b1ed4501e59fc8c6547fee8b33877c9249df684887fd513e8ce652b2200a22d43e987303131f070c6c759ad428cfd28d53b6
SSDEEP
96:q1V7dR7uwEU+hCT3GrxZ4MUtPNlz0MdG8EWvdM3IWwG34bv/:kuwEt8rsTUtPLzKNWSYWF4b
Checks for missing Authenticode signature.
resource |
---|
4fca0c733dafa524291064c60db66f3b |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
LocalAlloc
GetCurrentProcessId
WaitForSingleObject
CloseHandle
CreateEventW
LocalFree
LoadLibraryW
WideCharToMultiByte
FreeLibrary
GetLastError
GetProcAddress
DisableThreadLibraryCalls
free
_initterm
malloc
_strlwr
_adjust_fdiv
NtCreateFile
RtlInitUnicodeString
NtDeviceIoControlFile
inet_addr
AcsHlpAttemptConnection
AcsHlpNbConnection
AcsHlpNoteNewConnection
WSAttemptAutodialAddr
WSAttemptAutodialName
WSNoteSuccessfulHostentLookup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE