Encrypt
Execute
GetErrorInfoW
GetRequestAuthCode
GetRequestAuthCodeWithoutMD5
GetRequestAuthDogs
Initialize
RegisterCallBack
SetConfigPath
SetModulePath
UnInitialize
preg_get
preg_match
preg_mutual_match
report_scene_expansion
Static task
static1
Behavioral task
behavioral1
Sample
2d82c7e71ba5f94985dea6a66d6a5acb711a1217416649c160fa0d4ba5d80fa8.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2d82c7e71ba5f94985dea6a66d6a5acb711a1217416649c160fa0d4ba5d80fa8.dll
Resource
win10v2004-20231222-en
Target
2d82c7e71ba5f94985dea6a66d6a5acb711a1217416649c160fa0d4ba5d80fa8
Size
1.7MB
MD5
b5ad8e0101311947b83058e254246176
SHA1
bfb1ebbfc7a733e7c9bce894ffc26c0537fd5093
SHA256
2d82c7e71ba5f94985dea6a66d6a5acb711a1217416649c160fa0d4ba5d80fa8
SHA512
189e5cd7fe18201f5c42ee7b6edc26e53c6affcd7e11de53a42f31f5caeb667c9d96d7fa898e6985498c36a70d9edfc63b8d09c15051eca685bdf11062c03b05
SSDEEP
24576:mYpEJOuFpbrHXGOXqyfI7R0ePRIlXx+MLCeoadZi+BbH1SgRmm1RkjLZFV:mCQOqHXGO6ZUtLJoa7bHEUzwjLZFV
Checks for missing Authenticode signature.
resource |
---|
2d82c7e71ba5f94985dea6a66d6a5acb711a1217416649c160fa0d4ba5d80fa8 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
DecodePointer
DeleteCriticalSection
InterlockedDecrement
WaitForSingleObject
ReadFile
CloseHandle
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
GetFileAttributesA
CreateDirectoryA
GetModuleFileNameA
DeleteFileA
WideCharToMultiByte
MultiByteToWideChar
GetFileAttributesW
CopyFileA
TryEnterCriticalSection
Sleep
LeaveCriticalSection
EnterCriticalSection
CreateFileA
GetCurrentProcess
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
AreFileApisANSI
GetSystemTime
LocalFree
DeleteFileW
OutputDebugStringA
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
CreateFileW
HeapValidate
HeapCreate
HeapDestroy
FormatMessageW
LoadLibraryW
WriteFile
FormatMessageA
GetProcessHeap
UnlockFileEx
OutputDebugStringW
WaitForSingleObjectEx
LockFile
UnlockFile
HeapFree
QueryPerformanceCounter
SystemTimeToFileTime
HeapAlloc
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
HeapCompact
CreateMutexW
GetFileSize
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
InitializeCriticalSection
DisableThreadLibraryCalls
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
GetTempPathA
InitializeCriticalSectionAndSpinCount
CoUninitialize
CLSIDFromProgID
CoCreateGuid
CoInitializeEx
CoInitialize
CoCreateInstance
SysAllocString
SysFreeString
GetErrorInfo
ord36
ord19
ord18
ord4
ord41
ord8
ord24
ord9
ord11
ord31
ord16
ord32
ord39
ord75
ord76
ord30
ord43
ord26
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
wcscpy_s
ceil
_setjmp3
_libm_sse2_tan_precise
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_log_precise
_libm_sse2_cos_precise
__clean_type_info_names_internal
_except_handler4_common
_except1
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
?terminate@@YAXXZ
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
??1type_info@@UAE@XZ
_onexit
memmove
_purecall
??3@YAXPAX@Z
strcat_s
??2@YAPAXI@Z
free
malloc
fopen
fread
strcpy_s
ftell
fseek
fclose
??_V@YAXPAX@Z
strstr
memchr
_gmtime64_s
strftime
realloc
sprintf_s
vsprintf_s
fputc
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
_unlock_file
ungetc
fgetpos
_fseeki64
fflush
fgetc
fsetpos
atoll
setvbuf
_lock_file
isdigit
memcpy_s
fwrite
isxdigit
atoi
longjmp
printf
_itoa_s
atof
strrchr
??1exception@std@@UAE@XZ
wcsnlen
floor
_access
_mkdir
_strdup
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
_vsnprintf_s
strtok_s
tolower
towupper
strtoul
sscanf_s
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
strncmp
_localtime64_s
_msize
_beginthreadex
_endthreadex
_lock
_unlock
_calloc_crt
__dllonexit
StrCpyW
MiniDumpWriteDump
Encrypt
Execute
GetErrorInfoW
GetRequestAuthCode
GetRequestAuthCodeWithoutMD5
GetRequestAuthDogs
Initialize
RegisterCallBack
SetConfigPath
SetModulePath
UnInitialize
preg_get
preg_match
preg_mutual_match
report_scene_expansion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ