?Decrypt@@YAHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?Encrypt@@YAHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
Gtorcad_Init
Gtorcad_Unload
TripleDesDec
TripleDesEnc
Static task
static1
Behavioral task
behavioral1
Sample
3728a16f9f60ef5162696d4269410aa1424c906382881d0facd72d8ca360b776.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3728a16f9f60ef5162696d4269410aa1424c906382881d0facd72d8ca360b776.dll
Resource
win10v2004-20231215-en
Target
3728a16f9f60ef5162696d4269410aa1424c906382881d0facd72d8ca360b776
Size
528KB
MD5
c73465416327df8bd3d5d7a5e06e7c4d
SHA1
e3ba1af4f1175b465ee3d71444ef334aa9423b43
SHA256
3728a16f9f60ef5162696d4269410aa1424c906382881d0facd72d8ca360b776
SHA512
dc3dbc68378385d911420e0ce5596944491117a4c61a44acce0abebcab69c9b9c5354d1450b7376537ffd8ba365c35229c6537bb160e6389d1849c90673efea1
SSDEEP
6144:nzsLAwJ3cT+BTu5VAYddZi66UgxIvXBvJahmAKkyMDh12ftOkr0J4gw9wg:nsAE0+By5VDvRvwKYh1vkbgw9wg
Checks for missing Authenticode signature.
resource |
---|
3728a16f9f60ef5162696d4269410aa1424c906382881d0facd72d8ca360b776 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_itoa
_getpid
_CxxThrowException
_libm_sse2_pow_precise
floor
__clean_type_info_names_internal
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__CxxFrameHandler3
memset
_snprintf
_time64
fclose
atof
strcspn
?terminate@@YAXXZ
fwrite
_findfirst64i32
memcpy_s
srand
rand
??_V@YAXPAX@Z
_lock_file
setvbuf
_recalloc
fopen
_findclose
_findnext64i32
fsetpos
localeconv
fgetc
atoi
fflush
memchr
_fseeki64
fgetpos
_access
_resetstkoflw
strstr
ungetc
calloc
_unlock_file
??_U@YAPAXI@Z
sprintf_s
??0exception@std@@QAE@ABV01@@Z
memcpy
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
fputc
printf
_errno
tolower
strchr
malloc
strncmp
sprintf
??2@YAPAXI@Z
_purecall
free
memmove
??3@YAXPAX@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
??_7facet@locale@std@@6B@
??_7_Facet_base@std@@6B@
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?uncaught_exception@std@@YA_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$ctype@D@std@@QBEPBDPBD0PAD@Z
?widen@?$ctype@D@std@@QBEDD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_BADOFF@std@@3_JB
?id@?$numpunct@D@std@@2V0locale@2@A
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
ord5470
ord1139
ord503
ord2341
ord1047
ord324
ord2345
ord2339
ord5863
ord8970
ord1175
ord4173
ord7910
ord7915
ord5729
ord6466
ord4433
ord3554
ord3798
ord1505
ord325
ord1048
ord2317
ord2199
ord2364
ord2367
ord2330
ord2366
ord485
ord2221
ord2328
ord2136
ord2252
ord2355
ord5814
ord13488
ord11538
ord6745
ord14367
ord7771
ord14369
ord3008
ord4442
ord9528
ord5672
ord4450
ord4893
ord4858
ord4851
ord4916
ord4867
ord4900
ord4912
ord4875
ord4879
ord4883
ord4871
ord4904
ord8022
ord1731
ord1722
ord1726
ord1718
ord1706
ord12075
ord12077
ord13658
ord3217
ord10831
ord6844
ord8803
ord14361
ord11756
ord3787
ord11907
ord8977
ord11547
ord11546
ord5536
ord10121
ord10117
ord10119
ord10120
ord10118
ord8055
ord10088
ord3253
ord3256
ord6366
ord6443
ord3831
ord3117
ord4662
ord4682
ord310
ord997
ord9094
ord12038
ord2717
ord13541
ord6098
ord6436
ord3353
ord3354
ord4041
ord10302
ord11218
ord10844
ord8878
ord1106
ord9048
ord2716
ord13537
ord6096
ord11949
ord1108
ord2256
ord6973
ord462
ord11991
ord9073
ord9201
ord7350
ord8064
ord5293
ord7565
ord7575
ord7574
ord5119
ord5295
ord4764
ord5136
ord3646
ord9047
ord316
ord1041
ord1521
ord11986
ord3216
ord3321
ord3322
ord3890
ord11942
ord4863
ord2638
ord5139
ord5409
ord9186
ord5643
ord5433
ord4889
RemoveDirectoryA
CopyFileA
GlobalFree
FindClose
Process32Next
GetModuleFileNameA
CreateMutexA
GetCurrentDirectoryA
CreateToolhelp32Snapshot
ReleaseMutex
GetCurrentProcessId
GlobalReAlloc
DeleteFileA
WideCharToMultiByte
GetLocalTime
FindFirstFileA
LocalAlloc
LocalFree
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
SetCurrentDirectoryA
CreateDirectoryA
GlobalUnlock
MultiByteToWideChar
GetFileAttributesA
GlobalAlloc
WaitForSingleObject
GlobalLock
Process32First
GlobalSize
VirtualQuery
CreateThread
CloseHandle
Sleep
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
DecodePointer
GetLastError
InitializeCriticalSectionEx
OutputDebugStringW
SetClipboardData
OpenClipboard
GetCursorPos
EmptyClipboard
SendMessageA
GetClipboardData
GetDC
IsClipboardFormatAvailable
keybd_event
GetWindowRect
MessageBoxA
EnableWindow
ReleaseDC
CloseClipboard
GetDIBits
SetDIBColorTable
CopyEnhMetaFileA
CreateDIBSection
GetDeviceCaps
GetEnhMetaFileA
PatBlt
DeleteEnhMetaFile
DeleteObject
SelectObject
CreateCompatibleDC
PlayEnhMetaFile
CreateCompatibleBitmap
RealizePalette
SelectPalette
GetClipBox
GetStockObject
GetObjectA
DeleteDC
CreateSolidBrush
GetEnhMetaFileHeader
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
ShellExecuteA
CoCreateGuid
closesocket
send
recv
WSACleanup
htons
inet_addr
WSAStartup
connect
socket
GdiplusShutdown
GdipFree
GdipGetImageHeight
GdipGetImagePalette
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipDrawImageI
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromFile
GdipGetImagePaletteSize
GdipBitmapLockBits
GdipCloneImage
GdipGetImageWidth
GdiplusStartup
?Decrypt@@YAHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?Encrypt@@YAHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
Gtorcad_Init
Gtorcad_Unload
TripleDesDec
TripleDesEnc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ