AddFilterExeName
AddNoProxyIP
CheckSocks5
EmptyData
FilterProcessNet
FixNet
GetDriverMode
GetProcessFlow
GetProxyInfo
GetTcpSendBuf
InitData
IsProxyState
MonitorProcessTaskInfo
R0MonitorProcessInfo
SetFlowControl
SetProxy
SetProxyTcpUdp
StopProxy
Static task
static1
Behavioral task
behavioral1
Sample
1dd34e0ce36c68b0192a79891106d83fa8a425dd2b127b19f4674fdc9d015424.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1dd34e0ce36c68b0192a79891106d83fa8a425dd2b127b19f4674fdc9d015424.dll
Resource
win10v2004-20231215-en
Target
1dd34e0ce36c68b0192a79891106d83fa8a425dd2b127b19f4674fdc9d015424
Size
6.7MB
MD5
1e55e6b96f4221671c33e65410dd74ee
SHA1
18f576981d9ae86d8866c032353e43064b717481
SHA256
1dd34e0ce36c68b0192a79891106d83fa8a425dd2b127b19f4674fdc9d015424
SHA512
7495c5598aa366e35e567c4b30173496c84d1784c6913f4e139ea90559783a2e91a0ddc122153185e85f5af9334bdcd344c1562989f58835b99b84ae78f54ce8
SSDEEP
196608:jzl4/+XgbVP0V4BBgbdxywyNfu7dDXziLcyOWyI:F4/+QF08g5xaNUzp1WyI
Checks for missing Authenticode signature.
resource |
---|
1dd34e0ce36c68b0192a79891106d83fa8a425dd2b127b19f4674fdc9d015424 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSASocketA
SetTcpEntry
CloseServiceHandle
ShellExecuteExA
WinHttpReceiveResponse
GetFileVersionInfoSizeA
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetDesktopWindow
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
PathStripPathA
TextOutA
WTSSendMessageW
AddFilterExeName
AddNoProxyIP
CheckSocks5
EmptyData
FilterProcessNet
FixNet
GetDriverMode
GetProcessFlow
GetProxyInfo
GetTcpSendBuf
InitData
IsProxyState
MonitorProcessTaskInfo
R0MonitorProcessInfo
SetFlowControl
SetProxy
SetProxyTcpUdp
StopProxy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ