GenerateKey
GenerateKeyW
GetWindowInfos
MemloadFunc
Static task
static1
Behavioral task
behavioral1
Sample
a54a468b868220eca56ec6f3ac0cfcb6d3ce060ab0cfbf608307b75d0f4f23d9.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a54a468b868220eca56ec6f3ac0cfcb6d3ce060ab0cfbf608307b75d0f4f23d9.dll
Resource
win10v2004-20240226-en
Target
a54a468b868220eca56ec6f3ac0cfcb6d3ce060ab0cfbf608307b75d0f4f23d9
Size
125KB
MD5
74dbe5b40f41cd1534f3f41982a672c3
SHA1
f6fb7ccd636b62cf04c645d088e2be8cca44c39c
SHA256
a54a468b868220eca56ec6f3ac0cfcb6d3ce060ab0cfbf608307b75d0f4f23d9
SHA512
c5373bb199e634f90be14b637722264bed9fa5b050eb4113b69efcf07925b7fa0224e8a5eaf2f21aed1bdcfb7f4c4b7844110b9c55f137a327c1107d03c25658
SSDEEP
3072:4H18aGOtCJ8WetUWwOJTa0jdqrJNy3RzluqNCNDun+q3AkSu15:k18a74mWetUWbTlqrJNy3R8wCNk
Checks for missing Authenticode signature.
resource |
---|
a54a468b868220eca56ec6f3ac0cfcb6d3ce060ab0cfbf608307b75d0f4f23d9 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CloseHandle
DeleteFileW
LocalFree
DosDateTimeToFileTime
SetFilePointer
SystemTimeToFileTime
LocalAlloc
ReadFile
GetCurrentDirectoryW
GetFileType
GetLastError
MultiByteToWideChar
CreateFileW
WideCharToMultiByte
WriteFile
GetCurrentProcess
CreateProcessW
SetEnvironmentVariableA
CompareStringW
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
HeapSize
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DecodePointer
EncodePointer
GetTimeZoneInformation
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
DeleteCriticalSection
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
RaiseException
RtlPcToFileHeader
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LoadLibraryW
FlushFileBuffers
RegCloseKey
RegOpenKeyExW
RegSetValueExW
SHGetSpecialFolderPathW
SHGetFolderPathW
CoInitialize
CoCreateInstance
CoUninitialize
SysFreeString
VariantInit
VariantClear
SysAllocString
GenerateKey
GenerateKeyW
GetWindowInfos
MemloadFunc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ