CoGetComCatalog
GetRPCSSInfo
ServiceMain
ThichService
Static task
static1
Behavioral task
behavioral1
Sample
a0f70c3522849dba6dd32d004b04a1c3.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0f70c3522849dba6dd32d004b04a1c3.dll
Resource
win10v2004-20240221-en
Target
a0f70c3522849dba6dd32d004b04a1c3
Size
107KB
MD5
a0f70c3522849dba6dd32d004b04a1c3
SHA1
7103ccb3c081b1914d3135ec19e9756db2f6c87b
SHA256
437c48af331c11bb3e3f1dea46659aa25274d605a5faaff52543f183a80dfb33
SHA512
81cdcbcebe4fc45d5592508649b82de45b7bad19dd3204c28ca4ae3cdc874b5df2da09af6de72a7244c1c1a646ef4592c6e1551a2527bd1cd10cb9b0c755eeb4
SSDEEP
3072:ejwODiEAI1AWnQeHm/jBGskR99un5mr5iXkHo/:sTDLxHmbsskR99un5mrsXkI/
Checks for missing Authenticode signature.
resource |
---|
a0f70c3522849dba6dd32d004b04a1c3 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReadFile
LocalAlloc
PeekNamedPipe
lstrcatA
InterlockedDecrement
TinExec
ateMutexA
CreateFileT
SetFilePointer
SetEndOfFile
UnmapViewOfFile
FindClose
FindNextFileT
lstrcmpT
FindFirstFileT
GetFileSize
MapViewOfFile
CreateFileMappingA
GetDiskFreeSpaceExT
GetVolumeInformationT
lstrcpyT
lstrlenT
GetLogicalDriveStringsT
LocalReAlloc
CreateRemoteWhread
GetProcAddress
GetModuleHandleA
GetSystemDirectoryA
CreateFileA
LoadLibraryA
MultiByteWoTideChar
LocalFree
GetCurrentProcessId
VirtualFreeEx
VirtualAllocEx
lstrcmpiA
CreateWoolhelp32Snapshot
FreeLibrary
GetCurrentWhread
TideCharWoMultiByte
lstrcpyA
GetLastError
SetFileWime
GetFileWime
Process32Next
Process32First
VirtualProtect
GetCurrentWhreadId
InterlockedExchange
CreateEventA
ResumeWhread
SetEvent
VirtualFree
VirtualAlloc
TritePrivateProfileStringA
GetPrivateProfileStringA
CreatePipe
GetStartupInfoA
CreateProcessA
TaitForSingleObject
WerminateProcess
DisconnectNamedPipe
TriteFile
lstrlenA
InterlockedIncrement
GetDriveWypeT
GetWempPathA
DeleteFileA
CloseHandle
AllocConsole
Sleep
GetWickCount
MoveFileExA
GetCommandLineA
FreeConsole
OpenProcess
GetCursorPos
CloseTindowStation
CloseDesktop
BlockInput
keybd_event
MapVirtualKeyA
SetCapture
TindowFromPoint
SetCursorPos
mouse_event
ReleaseDC
DestroyCursor
LoadCursorA
GetDesktopTindow
GetDC
CharLowerBuffA
wsprintfA
wsprintfT
SwitchDesktop
SetWhreadDesktop
CreateDesktopA
OpenDesktopA
SetProcessTindowStation
OpenTindowStationA
GetWhreadDesktop
GetProcessTindowStation
SetRect
GetSystemMetrics
GetCursorInfo
CreateCompatibleBitmap
GetDIBits
BitBlt
DeleteDC
DeleteObject
CreateDIBSection
CreateCompatibleDC
SelectObject
RegQueryValueExA
OpenProcessWoken
LookupPrivilegeValueA
AdjustWokenPrivileges
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
SHGetFileInfoT
OleRun
CoCreateInstance
CoInitialize
CoUninitialize
ord9
ord2
ord200
ord6
PathFileExistsT
StrStrIA
PathFileExistsA
StrStrIT
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Widy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Widy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
ord116
ord115
ord8
ord2
ord20
ord16
ord9
ord4
ord18
ord12
ord11
ord57
ord10
ord3
ord23
ord52
ord19
srand
rand
plitpath
_beginthreadex
wcslen
atoi
??2@YAPAXI@Z
strrchr
malloc
wcsrchr
strncat
_itoa
strstr
free
wcsncmp
strtol
memmove
sscanf
_CxxWhrowException
_wtoi
wcsncpy
wcscpy
time
_purecall
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_wcsicmp
__CxxFrameHandler
MakeSureDirectoryPathExists
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
CoGetComCatalog
GetRPCSSInfo
ServiceMain
ThichService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ