bbb
kingsoft
Static task
static1
Behavioral task
behavioral1
Sample
bcebcbb071dab71b07880d8de734ccb5.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bcebcbb071dab71b07880d8de734ccb5.dll
Resource
win10v2004-20240226-en
Target
bcebcbb071dab71b07880d8de734ccb5
Size
25KB
MD5
bcebcbb071dab71b07880d8de734ccb5
SHA1
7b5bfcb66e0c169e171702988b2455d48fb037af
SHA256
b1dd5928aecd8a23dcc602403f15bcc5c357931c7b393b415d094464ad3e81b7
SHA512
dd444db11479127e1820585793c95aa06dc2332c59982728a935ab8f94702b0bca8e0eab807de7b21772663de354381d73948d50e6ef677d3bb386c911fd9e21
SSDEEP
384:ZctiSjcAXa/1jt9DyPEjO7hQ/b+8xNuP9B38Y7IpVmq19j2RBJykuJoU:miSjLK/1tyhQzhK78Y7I9jWbGmU
Checks for missing Authenticode signature.
resource |
---|
bcebcbb071dab71b07880d8de734ccb5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalUnlock
GlobalLock
GlobalAlloc
GetLastError
CreateMutexA
GetCurrentProcessId
ExitProcess
ResumeThread
WriteProcessMemory
VirtualProtectEx
OpenProcess
GetModuleFileNameA
ReadProcessMemory
GetPrivateProfileStringA
DeleteFileA
ReadFile
GetTempPathA
VirtualAlloc
GlobalFree
WideCharToMultiByte
GetTickCount
RaiseException
GetLocalTime
GetCurrentThreadId
InitializeCriticalSection
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
GetCommandLineA
IsBadReadPtr
TerminateThread
CreateThread
CreateFileA
WriteFile
CloseHandle
Sleep
GetCurrentProcess
TerminateProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
CallNextHookEx
GetWindowTextA
GetWindowThreadProcessId
ImageLoad
ImageUnload
_strcmpi
_strupr
_strlwr
_stricmp
wcslen
atol
srand
strcpy
sprintf
strlen
memcpy
??2@YAPAXI@Z
strrchr
memset
strcat
strncpy
strstr
strcmp
__CxxFrameHandler
rand
bbb
kingsoft
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ