InitMkawtfq
SetNegfwll
Xaahxmkxt
CreateCqmtkmxg
EndHdmclncf
Dgirfnyetw
Crjackam
Jgaedsr
Static task
static1
Behavioral task
behavioral1
Sample
a3c247ec84f21df86ddda84f0411a02e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3c247ec84f21df86ddda84f0411a02e.dll
Resource
win10v2004-20240221-en
Target
a3c247ec84f21df86ddda84f0411a02e
Size
152KB
MD5
a3c247ec84f21df86ddda84f0411a02e
SHA1
98eb54fd5cd8ce12b94c6f8915852764b880698d
SHA256
7d9e022dc705029e20743b2da91719c6cb63e1d50dea0fafc3696c529c460e41
SHA512
1c4327441937214cb581fe5437aef849ceae2d215b59a46b5f824f2ee16c4ddfd03e87468d86d44c69e9cefa9cc8b2bdc1146934025e7b47779591e9c621c5f5
SSDEEP
3072:KyY39k6ITZHY6sjoy4m6SzQKflyNzB/geJI:dYWJVBsjoy3fgJSC
Checks for missing Authenticode signature.
resource |
---|
a3c247ec84f21df86ddda84f0411a02e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateEventA
SignalObjectAndWait
BeginUpdateResourceA
FindVolumeClose
GetConsoleMode
SetEvent
DuplicateConsoleHandle
GetConsoleAliasesLengthA
ExitProcess
WriteConsoleOutputAttribute
RaiseException
VirtualAllocEx
ReadConsoleA
GetDevicePowerState
ResetEvent
PurgeComm
LZCopy
CreateFileMappingA
GetNumberOfConsoleFonts
GetProcessHeap
GetModuleHandleA
FindFirstChangeNotificationA
IsValidCodePage
ReadConsoleA
GetFileType
RequestDeviceWakeup
UnlockFileEx
GetVersionExA
HeapWalk
InternetCrackUrlA
FtpRemoveDirectoryW
ResumeSuspendedDownload
FtpSetCurrentDirectoryW
InternetQueryDataAvailable
FtpSetCurrentDirectoryW
InternetUnlockRequestFile
InternetGetConnectedStateExA
InitMkawtfq
SetNegfwll
Xaahxmkxt
CreateCqmtkmxg
EndHdmclncf
Dgirfnyetw
Crjackam
Jgaedsr
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ