Logon
_Logon@0
_goinit@0
_gostart@0
goinit
gostart
Static task
static1
Behavioral task
behavioral1
Sample
9a5c9536c7138cd546b69e82a6bc74ac.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a5c9536c7138cd546b69e82a6bc74ac.dll
Resource
win10v2004-20231215-en
Target
9a5c9536c7138cd546b69e82a6bc74ac
Size
15KB
MD5
9a5c9536c7138cd546b69e82a6bc74ac
SHA1
971343fcc1b4fba4a7c091451dfbbb21e04bcee4
SHA256
b681f9e66aa40109a32dab812241555e9b1f17105775dfd8b7bc9f98a26a5f55
SHA512
1bb698269aede233e1fc155f109e27540251d45eaed4315280b234b41cbb9f2382860f71f0e41e06afd081f27a2ab567d690543e967a5b270bb6cb2a196485a0
SSDEEP
384:NUX0acd+9kA7BFTjvKXiy6guivnEQx1fogF4Fd2:uc4Dsiy6gnnEQxdF4
Checks for missing Authenticode signature.
resource |
---|
9a5c9536c7138cd546b69e82a6bc74ac |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
SetLastError
GetLastError
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
OpenMutexA
Sleep
SearchPathA
ReadProcessMemory
GlobalAddAtomA
GetTickCount
CreateProcessA
InitializeCriticalSection
GetComputerNameA
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineA
WriteProcessMemory
EnterCriticalSection
LeaveCriticalSection
CreateMutexA
WaitForSingleObject
GetFullPathNameA
WriteFile
MoveFileExA
GlobalFindAtomA
GetCurrentProcess
DeleteFileA
WinExec
ReleaseMutex
ExpandEnvironmentStringsA
CreateFileA
GetFileSize
ReadFile
LoadLibraryA
CloseHandle
ReleaseDC
CallNextHookEx
UnhookWindowsHookEx
PostMessageA
SetWindowsHookExA
GetQueueStatus
GetDC
GetPixel
CryptCreateHash
CryptHashData
CryptImportKey
CryptVerifySignatureA
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
RegFlushKey
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
GetUserNameA
CryptAcquireContextA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
__CxxFrameHandler
_EH_prolog
_initterm
_adjust_fdiv
_strlwr
strcmp
tolower
memcpy
memset
time
sprintf
free
strstr
strcpy
malloc
strlen
strcat
Logon
_Logon@0
_goinit@0
_gostart@0
goinit
gostart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ