mrecv
msend
Static task
static1
Behavioral task
behavioral1
Sample
5983df970ae98c7e1cd4719985198c18.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5983df970ae98c7e1cd4719985198c18.dll
Resource
win10v2004-20231215-en
Target
5983df970ae98c7e1cd4719985198c18
Size
48KB
MD5
5983df970ae98c7e1cd4719985198c18
SHA1
1bc0372a281015efc95f9b589edb4943596cca19
SHA256
63c65effd13d638fa5bc4f9f28ca0304e339c435711481a06cab2cbdfd31d0a1
SHA512
b4648b9f2c5646179d54e8718cd1e1d8d957e6c56a4f5efb6ae1b6039ddb8c6db859dce843c81708911cd1c96562c6a4a53e8801d9149a914dabea3fed2ce184
SSDEEP
768:72co1cu1lfdTjaYWvepSK1TLJh9BUKYtR+pSlM5aA:4dNdTjOvepzBLJh9BUlJlr
Checks for missing Authenticode signature.
resource |
---|
5983df970ae98c7e1cd4719985198c18 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalLock
GlobalAlloc
GetCurrentProcess
GetModuleFileNameA
CloseHandle
GetPrivateProfileStringA
WideCharToMultiByte
GlobalFree
ExitProcess
ReadProcessMemory
VirtualProtectEx
CreateThread
WriteProcessMemory
RtlUnwind
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
mrecv
msend
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ