SetParamter
StartFileManageThread
StartKeyLogThread
StartProcessThread
StartShellThread
StartVideoThread
Static task
static1
Behavioral task
behavioral1
Sample
52921aff0925823b213f34ae7e0be928.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52921aff0925823b213f34ae7e0be928.dll
Resource
win10v2004-20231215-en
Target
52921aff0925823b213f34ae7e0be928
Size
30KB
MD5
52921aff0925823b213f34ae7e0be928
SHA1
6b14458b4cb3eba80f7c9673290b3683ad88824f
SHA256
70be2823119f7cd7bafcdf9c096a34ce9e727679ee91b20942fd5a9b724052f8
SHA512
05b5656080ccf74f7fc9ec9384542a5e63c8d7abcf87bf7dd2ec58860f7d6d81aa5a4ce5d2c7675fd123ef53f3a3a520ca339766ae1f8641a4759e9deeb3af64
SSDEEP
768:P0xKJsn0Eyz5IY5EirxA+EXk0s/IIM0W0Lnfp:cX65V5/rC+mvezfp
Checks for missing Authenticode signature.
resource |
---|
52921aff0925823b213f34ae7e0be928 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord1168
ord823
ord665
ord1979
ord6385
ord5186
ord354
ord800
ord922
ord537
ord825
puts
exit
strncpy
__dllonexit
_onexit
free
_initterm
sprintf
__CxxFrameHandler
_ftol
strncat
_stricmp
malloc
_adjust_fdiv
FileTimeToSystemTime
RaiseException
LocalAlloc
InterlockedExchange
lstrcmpiA
GetCurrentProcessId
GetLocalTime
GetStartupInfoA
GetSystemDirectoryA
OpenProcess
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Process32First
Module32First
GetPriorityClass
Process32Next
GetFileSize
ReadFile
CreateFileA
WriteFile
CreateThread
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
MoveFileA
CopyFileA
CloseHandle
CreateProcessA
DeleteFileA
FindClose
FindNextFileA
GetLastError
FileTimeToLocalFileTime
FindFirstFileA
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
SetParamter
StartFileManageThread
StartKeyLogThread
StartProcessThread
StartShellThread
StartVideoThread
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ