ATerminatePlay
DeleteTempFile
FBuildTempPathW
HrEditPhonebookEntry
SetSystemParameter
Static task
static1
Behavioral task
behavioral1
Sample
539635408ecd9818d0cff78a75387459.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
539635408ecd9818d0cff78a75387459.dll
Resource
win10v2004-20231222-en
Target
539635408ecd9818d0cff78a75387459
Size
169KB
MD5
539635408ecd9818d0cff78a75387459
SHA1
1dbe9e440e6a5b1902c1e5d595533ce815dc70d7
SHA256
8f274ce6c4e2e4b7db6c1445cbe3480230ee221480e5bce769931378464e70c2
SHA512
53479b2b21b6b4c6b135cbb178fcec257ce4b36e7cf58cb78db8955e551da0821d54d54983cdc9db24e0e48a3eb4bcefa1cf82c29a115bd894518cda6e31a041
SSDEEP
3072:aGh/lycfXgBYmqeLY7pH9L2cj58m1ZonKgKb+X:XlzfE2pdL2mn1uK
Checks for missing Authenticode signature.
resource |
---|
539635408ecd9818d0cff78a75387459 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wprintf
wcsstr
printf
memset
free
exit
_wcslwr
_wcsdup
_ismbblead
_initterm
_exit
_controlfp
_cexit
_amsg_exit
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__getmainargs
_XcptFilter
SHCreateDirectoryExW
SHGetSpecialFolderLocation
CommandLineToArgvW
IsWindow
MessageBoxW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
VirtualAlloc
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
InterlockedExchange
VirtualFree
GetModuleHandleA
GetFullPathNameW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
FindNextFileW
ExitProcess
VirtualProtect
lstrlenW
GetProcAddress
FindFirstFileW
ArcTo
PolyDraw
ATerminatePlay
DeleteTempFile
FBuildTempPathW
HrEditPhonebookEntry
SetSystemParameter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ