erc
fcsec
Static task
static1
Behavioral task
behavioral1
Sample
7f72d66958a27b70fcde864cc543acc3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f72d66958a27b70fcde864cc543acc3.dll
Resource
win10v2004-20231222-en
Target
7f72d66958a27b70fcde864cc543acc3
Size
25KB
MD5
7f72d66958a27b70fcde864cc543acc3
SHA1
80696116451cc10f7c026b05a16214385b8cbe04
SHA256
bdab6c2114a585fc431208ebcb68514079e9ba0e560616b130922543a124fa9b
SHA512
5168b9aed1ee06e878c2600380700f5f33a3802340ac18e14f71118191f046db3c4bfbc8b1704c457baa592e7cec0d00917b6ab0a3ac905ee507613896e811ca
SSDEEP
384:RB5eW700uq8UaLn3be6rOxDYztUmLibU/Uo6TVqsHR7/kR6F4lZVVj:L53R63beMOxDYzWGibUr68pR6F4Z
Checks for missing Authenticode signature.
resource |
---|
7f72d66958a27b70fcde864cc543acc3 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMutexA
GetCurrentProcessId
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
WriteFile
DeleteFileA
InitializeCriticalSection
VirtualProtectEx
VirtualProtect
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
ReadProcessMemory
GetLastError
SetThreadContext
OpenThread
MultiByteToWideChar
TerminateProcess
CreateProcessA
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
ExitProcess
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
GetModuleHandleA
SetUnhandledExceptionFilter
GetProcAddress
CallNextHookEx
GetWindowThreadProcessId
GetWindowTextA
_strupr
_strcmpi
_stricmp
_strlwr
??2@YAPAXI@Z
memcpy
strrchr
memset
sprintf
strcat
strcpy
strcmp
wcslen
strlen
strstr
??3@YAXPAX@Z
strncpy
strchr
__CxxFrameHandler
erc
fcsec
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ