Drop0
Drop1
Drop2
T34
Static task
static1
Behavioral task
behavioral1
Sample
out.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
out.dll
Resource
win10v2004-20231215-en
Target
out.dll.exe
Size
575KB
MD5
403230be14a8cd33135514625cc0b9ae
SHA1
f20ec57d36f48d2c6b86366bac77c1b60923fcbe
SHA256
8ecd3b135e1fbed312bad0219e618a0cf3bb48a9a2ae765037d22e4a281ee59a
SHA512
5189ddc4001f0cd748b754a819664e06303e83ee510f540bf06cbaea74ea1c6c021da5092e870772e17a0d15440fa07a6b756b552c500a6fe6f7a291ef46c8cc
SSDEEP
12288:8dWofjkcMZx3n0hXuV3xKaHR+Z+nSZ6ySZoz3W:Uf6x35pHIZ+nO6zZ
Checks for missing Authenticode signature.
resource |
---|
out.dll.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
RaiseException
CreateThread
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
VirtualProtect
SetLastError
VirtualFree
lstrlenW
VirtualAlloc
GetThreadLocale
LoadLibraryA
GetNativeSystemInfo
GetProcAddress
CloseHandle
IsBadReadPtr
LocalAlloc
ExitThread
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
WinExec
SetEndOfFile
WriteConsoleW
CreateFileW
SetStdHandle
HeapReAlloc
GlobalFree
GetLastError
MultiByteToWideChar
HeapSize
GetComputerNameExW
InitializeCriticalSectionEx
GetEnvironmentVariableW
TerminateProcess
FreeLibrary
HeapFree
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
DeleteFileW
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
Sleep
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
EncodePointer
GetLocaleInfoEx
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CompareStringEx
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
GetCurrentProcess
OutputDebugStringW
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
GetStdHandle
GetFileType
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
RtlUnwind
EnumThreadWindows
RegGetValueA
CryptDestroyKey
CryptAcquireContextW
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
RegOpenKeyW
RegQueryValueExW
CommandLineToArgvW
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpWriteData
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpConnect
WinHttpCrackUrl
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpSetOption
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
Drop0
Drop1
Drop2
T34
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ