Drop0
Drop1
Drop2
T34
Static task
static1
Behavioral task
behavioral1
Sample
8ecd3b135e1fbed312bad0219e618a0cf3bb48a9a2ae765037d22e4a281ee59a.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8ecd3b135e1fbed312bad0219e618a0cf3bb48a9a2ae765037d22e4a281ee59a.dll
Resource
win10v2004-20231215-en
Target
403230be14a8cd33135514625cc0b9ae.bin
Size
262KB
MD5
9385d6fd060ad9d710f63fd61125a98e
SHA1
8b7b1ef9346aedfb4c9c73323484330ad5fd0d03
SHA256
88c3d727450f5b0e08c039dcaafa826c3db67cd818b276a2fb7bb4d6ac28007e
SHA512
b9744d6b1293c94b3cc2efbe71055ac021975b43f6b9b0a5f51e169537aef63b1e37cbc6e5fae2ebcb34cd79293c7125b6e4688b8b4816e7267f8fac8f5befb1
SSDEEP
6144:5dLXU/XuXanjj4aBPlb2DzrLBMfXcTWpXk84D1volyIuDjug1Y4ul6f0Z:5dL8eiX42QXivcTWJp49oMIuDX1Ytl6y
Checks for missing Authenticode signature.
resource |
---|
unpack001/8ecd3b135e1fbed312bad0219e618a0cf3bb48a9a2ae765037d22e4a281ee59a.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
RaiseException
CreateThread
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
VirtualProtect
SetLastError
VirtualFree
lstrlenW
VirtualAlloc
GetThreadLocale
LoadLibraryA
GetNativeSystemInfo
GetProcAddress
CloseHandle
IsBadReadPtr
LocalAlloc
ExitThread
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
WinExec
SetEndOfFile
WriteConsoleW
CreateFileW
SetStdHandle
HeapReAlloc
GlobalFree
GetLastError
MultiByteToWideChar
HeapSize
GetComputerNameExW
InitializeCriticalSectionEx
GetEnvironmentVariableW
TerminateProcess
FreeLibrary
HeapFree
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
DeleteFileW
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
Sleep
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
EncodePointer
GetLocaleInfoEx
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CompareStringEx
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
GetCurrentProcess
OutputDebugStringW
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
GetStdHandle
GetFileType
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
RtlUnwind
EnumThreadWindows
RegGetValueA
CryptDestroyKey
CryptAcquireContextW
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
RegOpenKeyW
RegQueryValueExW
CommandLineToArgvW
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpWriteData
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpConnect
WinHttpCrackUrl
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpSetOption
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
Drop0
Drop1
Drop2
T34
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ