DllMain
HookWin32Apia
catchxxa
catchxxb
Static task
static1
Behavioral task
behavioral1
Sample
d7f50c048b4e96d2ff0c50750f1e7245a263d67423378e20b5fda8fccb9c765c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7f50c048b4e96d2ff0c50750f1e7245a263d67423378e20b5fda8fccb9c765c.dll
Resource
win10v2004-20240226-en
Target
d7f50c048b4e96d2ff0c50750f1e7245a263d67423378e20b5fda8fccb9c765c
Size
19KB
MD5
1d799af2636dc0b69ffa994de7c5e1b1
SHA1
abd580b89e27e4fdd935f98fce8d58c2b094da8a
SHA256
d7f50c048b4e96d2ff0c50750f1e7245a263d67423378e20b5fda8fccb9c765c
SHA512
ae5c59c9b09116b0322427b3235abe6970acaecb70c2a0d18d0e146a8a20493352a853d977836bb313ea83f2901c9dcbea82555226e627ee63b05a11cd89aed7
SSDEEP
384:A1hgjNtCXQtMfb7P0iUxtPyzIU78oy4Vp:KCjH2z7P4xtPM778oyK
Checks for missing Authenticode signature.
resource |
---|
d7f50c048b4e96d2ff0c50750f1e7245a263d67423378e20b5fda8fccb9c765c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
LoadLibraryA
Sleep
WritePrivateProfileStringA
GetPrivateProfileStringA
GetVersionExA
WideCharToMultiByte
GetTempPathA
CreateThread
IsBadReadPtr
GetCurrentProcessId
CreateSemaphoreA
GetModuleFileNameA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetProcAddress
VirtualAlloc
VirtualProtect
GetModuleHandleA
CloseHandle
LCMapStringA
MultiByteToWideChar
RtlUnwind
lstrlenA
HeapFree
GetProcessHeap
HeapAlloc
CharLowerBuffA
wsprintfA
InternetCloseHandle
InternetConnectA
InternetOpenA
HttpSendRequestW
HttpSendRequestA
HttpOpenRequestA
DllMain
HookWin32Apia
catchxxa
catchxxb
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ