JSymmetric_encrypt
JencryptMaxnumber
JencryptVersion
Symmetric_DecryptString
Symmetric_EncryptString
Symmetric_Hash_crc
Symmetric_hash
Static task
static1
Behavioral task
behavioral1
Sample
49633ab8a007e348d4b8d4bedb556fa0d9c90aa51bfaf65e1f47ec385f4b8234.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
49633ab8a007e348d4b8d4bedb556fa0d9c90aa51bfaf65e1f47ec385f4b8234.dll
Resource
win10v2004-20240226-en
Target
49633ab8a007e348d4b8d4bedb556fa0d9c90aa51bfaf65e1f47ec385f4b8234
Size
1.3MB
MD5
b35a6bee7c78d7421dc1ba78fbb1fc37
SHA1
9906e821dac8f949c2bd857d83011d6283670ab2
SHA256
49633ab8a007e348d4b8d4bedb556fa0d9c90aa51bfaf65e1f47ec385f4b8234
SHA512
c68461d612d1cb4de3fa0429fd14e9e30dc48fd075c41b1b13fb5463807de8bfa64bf37a4db579904804cc027d58af218e4e5611e4008af4839401df5de124fe
SSDEEP
24576:2Tqk5xi2skYTcSUDi5Uj9EFjxyfS3vVlEDa1ZJEz:2jiASyiUj9EFjxyKN
Checks for missing Authenticode signature.
resource |
---|
49633ab8a007e348d4b8d4bedb556fa0d9c90aa51bfaf65e1f47ec385f4b8234 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EncodePointer
DecodePointer
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetCurrentThreadId
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
GetFileType
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetModuleFileNameA
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteFile
GetModuleFileNameW
HeapReAlloc
LCMapStringW
LoadLibraryExW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
OutputDebugStringW
CloseHandle
SetStdHandle
WriteConsoleW
CreateFileW
QueryPerformanceCounter
SetLastError
DeleteCriticalSection
GetLastError
JSymmetric_encrypt
JencryptMaxnumber
JencryptVersion
Symmetric_DecryptString
Symmetric_EncryptString
Symmetric_Hash_crc
Symmetric_hash
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ