bbb
ccc
Static task
static1
Behavioral task
behavioral1
Sample
b969d61927c4c7d1fdb0cd8df356a378.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b969d61927c4c7d1fdb0cd8df356a378.dll
Resource
win10v2004-20240226-en
Target
b969d61927c4c7d1fdb0cd8df356a378
Size
28KB
MD5
b969d61927c4c7d1fdb0cd8df356a378
SHA1
db68141e508a3404abc52ede4cc96deaf832c002
SHA256
a487b1e054d424310fcb220e0f47ae2cd3f68078959f22eb87145f63bbcaa334
SHA512
9e833b67c9a2a2e7b2eb63f05efb62db88a26d26eb4818987c892da83363f7364546d6eb079c796d0914301063092251a1b918763fc1dd62199b90c899c95723
SSDEEP
768:WzeYCav+S+9h6GcqrnLrUxuECv2+JyMIK6Xn:+eiiTLVLB0n
Checks for missing Authenticode signature.
resource |
---|
b969d61927c4c7d1fdb0cd8df356a378 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateMutexA
GetCurrentProcessId
ExitProcess
ResumeThread
WriteProcessMemory
VirtualProtectEx
OpenProcess
GetModuleFileNameA
GetProcAddress
ReadProcessMemory
GetModuleHandleA
DeleteFileA
ReadFile
GetTempPathA
VirtualAlloc
GetPrivateProfileStringA
WideCharToMultiByte
MultiByteToWideChar
GlobalAlloc
LoadLibraryA
GetSystemDirectoryA
GetCurrentThreadId
SetFilePointer
InitializeCriticalSection
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
Process32Next
Process32First
CreateToolhelp32Snapshot
GlobalLock
GlobalUnlock
GlobalFree
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
CreateFileA
WriteFile
CloseHandle
Sleep
GetCurrentProcess
CreateProcessA
TerminateProcess
CallNextHookEx
UnhookWindowsHookEx
GetWindowTextA
FindWindowA
GetWindowThreadProcessId
GetForegroundWindow
SetWindowsHookExA
ImageLoad
ImageUnload
PathFileExistsA
atol
wcslen
_strcmpi
_strupr
_strlwr
_stricmp
strcmp
fopen
fread
fclose
strstr
strchr
strcpy
sprintf
strlen
memcpy
??2@YAPAXI@Z
strrchr
memset
strcat
atoi
??3@YAXPAX@Z
strncpy
InternetCloseHandle
InternetReadFile
bbb
ccc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ