LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_mainB_@8
main
main5
mainB
mainW
main_
Static task
static1
Behavioral task
behavioral1
Sample
627f6eff7057b0473bc0b5109bd972048e552183c0493c9e8c2de66e8acab0cb.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
627f6eff7057b0473bc0b5109bd972048e552183c0493c9e8c2de66e8acab0cb.dll
Resource
win10v2004-20240319-en
Target
627f6eff7057b0473bc0b5109bd972048e552183c0493c9e8c2de66e8acab0cb
Size
1.6MB
MD5
f7a8e163a84d0460a71ec5943f140fd7
SHA1
b21dbe1024b2c5d1ffa6a9e2b1ebf5ad38503fcb
SHA256
627f6eff7057b0473bc0b5109bd972048e552183c0493c9e8c2de66e8acab0cb
SHA512
a857878a1190f89555ecd388ab2cb2cb933fd7bb74b89cdbd5232dd88b92e9c6bcb03191c13c9a1f5ae9a14830657a78ee59b59d928cddf28618d6fa86ceb031
SSDEEP
49152:T+1mU8PBeMFmQdEK95gczFRvdbZn9lPzEQAC:u8JeRQOKYeNlZ9lQQ
Checks for missing Authenticode signature.
resource |
---|
627f6eff7057b0473bc0b5109bd972048e552183c0493c9e8c2de66e8acab0cb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
GetModuleHandleW
TlsSetValue
WriteConsoleW
TlsGetValue
GetDiskFreeSpaceExW
GetDriveTypeW
GetLogicalDriveStringsW
QueryPerformanceFrequency
GlobalFree
GlobalAlloc
SetCurrentDirectoryW
WinExec
WriteProcessMemory
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SetEnvironmentVariableW
ExpandEnvironmentStringsW
HeapReAlloc
GlobalMemoryStatusEx
LockResource
LoadResource
SizeofResource
FindResourceW
GetExitCodeThread
WaitForMultipleObjects
GetCurrentThreadId
RemoveDirectoryW
GetProcessTimes
SetEndOfFile
FormatMessageW
QueryPerformanceCounter
SetConsoleWindowInfo
GetLargestConsoleWindowSize
GetVolumeNameForVolumeMountPointW
SetFilePointerEx
GetSystemTimeAsFileTime
DefineDosDeviceW
VirtualAlloc
QueryDosDeviceW
SetThreadPriority
GetCurrentThread
CopyFileW
GetLogicalDrives
WaitNamedPipeW
GlobalMemoryStatus
SleepEx
MoveFileW
MoveFileExW
OpenThread
TerminateThread
SetSystemPowerState
GetUserDefaultLCID
InterlockedExchange
GetACP
GetLocaleInfoA
RaiseException
FileTimeToSystemTime
SystemTimeToFileTime
ReleaseSemaphore
ResetEvent
DisconnectNamedPipe
GetVolumeInformationW
GetDiskFreeSpaceW
lstrcpyA
lstrcpynA
GetHandleInformation
SetLocalTime
SetEnvironmentVariableA
GlobalAddAtomA
DeleteFileW
DeleteVolumeMountPointW
GlobalUnlock
GlobalLock
CreateHardLinkW
VirtualProtect
GetConsoleWindow
SetConsoleScreenBufferSize
AllocConsole
GetFullPathNameW
FileTimeToLocalFileTime
LCMapStringA
GetSystemInfo
GetFileSize
EnumResourceNamesW
GetTempPathW
LCMapStringW
SetVolumeMountPointW
SetVolumeLabelW
GetLongPathNameW
GetTimeZoneInformation
LocalFileTimeToFileTime
GlobalDeleteAtom
Beep
GetFileInformationByHandle
SetFileAttributesW
SetFileTime
OpenEventW
FindFirstFileW
CreateNamedPipeW
CreateMailslotW
OpenMutexW
CreateSemaphoreW
OpenSemaphoreW
VirtualQueryEx
VirtualProtectEx
SetThreadContext
GetThreadContext
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
UnhandledExceptionFilter
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
SetHandleCount
IsBadWritePtr
HeapCreate
HeapDestroy
MultiByteToWideChar
VirtualQuery
TlsFree
GetFileType
SetStdHandle
HeapSize
GetVersionExA
GetCommandLineA
RtlUnwind
IsBadCodePtr
CompareStringA
CompareStringW
GetFileSizeEx
CreateFileA
WideCharToMultiByte
CreateMutexA
GetVersionExW
LocalFree
lstrcmpA
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
CreateThread
CreatePipe
DuplicateHandle
SetFilePointer
CreateNamedPipeA
SetNamedPipeHandleState
LoadLibraryExW
WriteFile
GetShortPathNameW
ConnectNamedPipe
GetOverlappedResult
CreateJobObjectW
AssignProcessToJobObject
ResumeThread
GetExitCodeProcess
TerminateJobObject
GetCommandLineW
GetVersion
ReadProcessMemory
LoadLibraryW
WaitForSingleObject
ExitProcess
lstrcatA
CreateDirectoryW
CreateProcessW
FindNextFileW
FlushFileBuffers
FindFirstVolumeW
CreateFileW
DeviceIoControl
FindNextVolumeW
FindVolumeClose
IsBadReadPtr
GetProcessAffinityMask
GetModuleHandleA
HeapFree
GetModuleFileNameW
SearchPathW
CreateFileMappingA
OpenFileMappingA
TerminateProcess
UnmapViewOfFile
GetEnvironmentVariableA
Sleep
SetErrorMode
GetStdHandle
GetProcessHeap
TlsAlloc
LoadLibraryA
GetProcAddress
CreateFiber
ConvertThreadToFiber
DeleteFiber
SwitchToFiber
GetLocaleInfoW
GetCurrentProcess
SetProcessWorkingSetSize
GetEnvironmentVariableW
GetEnvironmentStringsW
GetCurrentProcessId
OpenFileMappingW
GetLastError
SetLastError
CreateMutexW
CreateEventW
CreateFileMappingW
MapViewOfFile
GetCurrentDirectoryW
SetEvent
FreeEnvironmentStringsW
OpenProcess
ReleaseMutex
HeapAlloc
lstrlenA
lstrcpynW
lstrcatW
lstrcpyW
lstrcmpW
lstrcmpiW
FindClose
ReadFile
CloseHandle
EnterCriticalSection
LeaveCriticalSection
MulDiv
GetTickCount
GetStartupInfoW
FreeLibrary
GetFileAttributesExW
lstrlenW
GetWindowThreadProcessId
SetScrollInfo
SetScrollPos
SetScrollRange
SetFocus
GetWindowDC
IsIconic
GetMessageW
DialogBoxParamW
RegisterClassExW
LockWorkStation
mouse_event
EnumDisplayDevicesW
ChangeDisplaySettingsExW
DialogBoxIndirectParamW
SetParent
BeginPaint
EndPaint
SetLayeredWindowAttributes
GetMenu
GetMenuItemCount
DefWindowProcW
LoadMenuW
RemoveMenu
InsertMenuW
InvalidateRect
GetDlgItemTextW
EndDialog
FillRect
RedrawWindow
CallWindowProcW
GetKeyState
EnumDisplaySettingsW
GetSubMenu
GetMenuItemID
ModifyMenuW
UnregisterHotKey
RegisterHotKey
LoadBitmapW
SetCursor
DestroyIcon
MsgWaitForMultipleObjects
UnhookWindowsHookEx
SetWindowsHookExW
GetAsyncKeyState
PostQuitMessage
CallNextHookEx
GetKeyboardState
keybd_event
RegisterDeviceNotificationW
ExitWindowsEx
SendMessageTimeoutW
IsWindow
ScreenToClient
GetWindowTextLengthW
OffsetRect
CharUpperW
OpenDesktopW
SetThreadDesktop
SwitchDesktop
CloseDesktop
GetCursorPos
CreatePopupMenu
TrackPopupMenu
DestroyMenu
wsprintfA
PeekMessageW
TranslateMessage
DispatchMessageW
LoadStringW
AppendMenuW
RegisterWindowMessageW
FindWindowA
GetLastInputInfo
SystemParametersInfoW
WaitForInputIdle
GetSystemMenu
LoadCursorW
CopyImage
GetSysColor
IsDialogMessageW
AttachThreadInput
GetForegroundWindow
FindWindowExA
SetCursorPos
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
PtInRect
EnumChildWindows
EnableMenuItem
GetWindowLongW
GetClientRect
wsprintfW
IsRectEmpty
MessageBoxW
GetClassNameW
SwitchToThisWindow
CreateIconFromResourceEx
IsWindowEnabled
GetScrollRange
SubtractRect
GetIconInfo
DrawEdge
DrawFrameControl
DrawFocusRect
DrawIconEx
GetFocus
GetScrollPos
GetActiveWindow
CreateDialogParamW
SetMenuItemBitmaps
EnumWindows
UpdateWindow
SetCapture
ReleaseCapture
ShowCursor
GetWindowInfo
ChildWindowFromPointEx
GetScrollInfo
WindowFromPoint
IsChild
CreateIconFromResource
FindWindowExW
DrawIcon
DestroyCursor
CreateIconIndirect
ScrollWindow
SetMenu
CreateMenu
SetWindowRgn
FindWindowW
LoadStringA
CharUpperA
IsWindowVisible
LoadImageW
GetClipboardData
DrawTextW
GetSystemMetrics
ShowScrollBar
EnableWindow
GetDesktopWindow
SetActiveWindow
SetForegroundWindow
BringWindowToTop
GetWindowTextW
SetWindowTextW
ClientToScreen
MoveWindow
CreateWindowExW
SetWindowLongW
GetDlgCtrlID
GetParent
LoadIconW
ReleaseDC
GetDC
SetDlgItemTextW
DestroyWindow
GetDlgItem
SetWindowPos
ShowWindow
GetWindowRect
KillTimer
SetTimer
SendMessageW
PostMessageW
GetMenuStringW
Rectangle
MoveToEx
LineTo
GetTextMetricsW
Polyline
CreateEllipticRgn
CreatePen
Ellipse
SetPixel
ExtTextOutW
GetPixel
CreateBitmap
SetBkColor
SetDIBits
CreateFontW
CreateRectRgn
CombineRgn
SelectPalette
RealizePalette
GetDIBits
CreateDCW
GetDeviceCaps
GetBkColor
StretchBlt
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateSolidBrush
RemoveFontResourceW
AddFontResourceW
GetStockObject
SetBkMode
SetTextColor
DeleteDC
DeleteObject
SelectObject
OpenServiceW
CheckTokenMembership
CryptEnumProviderTypesW
CryptGetProvParam
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptReleaseContext
CryptDestroyHash
RegLoadKeyW
RegUnLoadKeyW
GetUserNameW
LookupAccountNameW
GetNamedSecurityInfoW
BuildExplicitAccessWithNameW
SetNamedSecurityInfoW
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExA
RegDeleteKeyW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
InitiateSystemShutdownW
ChangeServiceConfigW
ChangeServiceConfig2W
RegCreateKeyExW
RegCloseKey
LookupAccountSidW
GetSecurityInfo
FreeSid
CreateRestrictedToken
AllocateAndInitializeSid
OpenProcessToken
CreateProcessWithLogonW
CreateProcessAsUserW
AdjustTokenPrivileges
SetTokenInformation
LookupPrivilegeValueW
DuplicateTokenEx
GetTokenInformation
StartServiceW
CreateServiceW
CloseServiceHandle
OpenSCManagerW
DeleteService
ControlService
SetServiceStatus
AbortSystemShutdownW
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
SetSecurityInfo
SetEntriesInAclW
SHChangeNotify
SHAppBarMessage
SHGetPathFromIDListW
SHBrowseForFolderW
Shell_NotifyIconW
SHFileOperationW
DragAcceptFiles
ShellExecuteExW
SHGetSpecialFolderPathA
DragQueryFileW
SHGetSpecialFolderPathW
OleLoadPicture
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
SetupDiSetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiClassNameFromGuidW
CM_Locate_DevNodeW
SetupDiEnumDriverInfoW
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdW
SetupDiGetDriverInfoDetailW
SetupDiSetClassInstallParamsW
SetupDiClassGuidsFromNameW
CM_Get_Device_IDW
SetupDiClassNameFromGuidA
CM_Get_DevNode_Status
CM_Request_Device_EjectW
CM_Query_And_Remove_SubTreeW
CM_Get_Parent
SetupDiOpenClassRegKey
SetupDiGetDeviceInfoListDetailW
CM_Get_DevNode_Status_Ex
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiChangeState
CM_Reenumerate_DevNode
StrCmpNIW
StrCmpNIA
StrCmpNW
StrChrW
StrRChrW
StrStrIW
StrStrW
StrCpyNW
StrToIntExW
PathMatchSpecW
StrStrA
wnsprintfW
StrCmpNA
StrCmpIW
StrPBrkW
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_mainB_@8
main
main5
mainB
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ