CapApiClose
CapApiCreate
CapApiOpen
CapApiQuery
CapApiWorker
Static task
static1
Behavioral task
behavioral1
Sample
8e7775a07559ddcb5b653134e9ecb750.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e7775a07559ddcb5b653134e9ecb750.dll
Resource
win10v2004-20231215-en
Target
8e7775a07559ddcb5b653134e9ecb750
Size
96KB
MD5
8e7775a07559ddcb5b653134e9ecb750
SHA1
56a341b2d712d1f4209ec76281166b5f763d063c
SHA256
22ef1e168487f2de12aa15cac7100d0f2a24f8cfc276d6eb2c9577bdbdb37447
SHA512
ecd39dde77c477084db385e52282c411fa6710a49389efa6afe842c6a3bfae27b118f15b71b86dc5ef995b6ecfab51fd84282cadbb23558031bb33a3f32c6571
SSDEEP
1536:S0qTkMxnufzfMXT/vkf6txMIwzKeO54qDjVRMfOYtyilIJxr:xqx/4fD0aYhRMVyilIJp
Checks for missing Authenticode signature.
resource |
---|
8e7775a07559ddcb5b653134e9ecb750 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteService
StartServiceA
ControlService
OpenSCManagerA
EnumServicesStatusA
CloseServiceHandle
OpenServiceA
QueryServiceConfigA
QueryServiceConfig2A
RegEnumKeyExA
GetTokenInformation
LookupAccountSidA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ChangeServiceConfigA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetObjectA
GetDIBits
DeleteObject
DeleteDC
GetDeviceCaps
SHDeleteKeyA
RegisterClassA
CreateWindowExA
IsWindow
SendMessageA
CloseWindow
DestroyWindow
UnregisterClassA
ExitWindowsEx
EnumWindowStationsA
wsprintfA
OpenWindowStationA
GetProcessWindowStation
SetProcessWindowStation
CloseWindowStation
OpenDesktopA
GetThreadDesktop
SetThreadDesktop
CloseDesktop
GetDC
ReleaseDC
FindWindowA
ShowWindow
EnumDesktopsA
GetLastError
CreateFileA
GetCurrentThreadId
GetModuleFileNameW
lstrcpyA
SetLastError
IsBadReadPtr
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
ReadProcessMemory
ResumeThread
VirtualProtectEx
CreateDirectoryA
GetSystemDirectoryA
GetVolumeInformationA
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
SetPriorityClass
GetPriorityClass
GetCurrentProcess
SetFilePointer
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
GlobalMemoryStatus
GetVersionExA
GetComputerNameA
ReadFile
PeekNamedPipe
CreatePipe
WriteFile
GetDriveTypeA
GetLogicalDrives
FindClose
FindNextFileA
FindFirstFileA
GetFileSize
DeleteFileA
RemoveDirectoryA
GetProcessTimes
SetErrorMode
OutputDebugStringA
GetSystemInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
VirtualAlloc
VirtualQuery
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
GenerateConsoleCtrlEvent
WriteConsoleInputA
GetConsoleOutputCP
ReadConsoleOutputAttribute
ReadConsoleOutputCharacterA
GetConsoleScreenBufferInfo
WaitForSingleObject
TerminateProcess
AllocConsole
FreeConsole
SetConsoleCtrlHandler
GetStdHandle
CreateConsoleScreenBuffer
SetConsoleScreenBufferSize
SetConsoleActiveScreenBuffer
CreateProcessA
DisableThreadLibraryCalls
ExitProcess
GetModuleHandleA
GetModuleFileNameA
ExpandEnvironmentStringsA
GetCurrentProcessId
CreateThread
CloseHandle
GetTickCount
Sleep
LoadLibraryA
GetProcAddress
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
GetThreadPriority
SetThreadPriority
FreeLibrary
DeleteCriticalSection
GetDiskFreeSpaceExA
InitializeCriticalSection
IsBadCodePtr
IsBadWritePtr
RtlUnwind
GetCommandLineA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CapApiClose
CapApiCreate
CapApiOpen
CapApiQuery
CapApiWorker
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ