LGBT_Launch
LGBT_SelectDevice
LGBT_Terminate
Static task
static1
Behavioral task
behavioral1
Sample
0d0acd7e7257a715c10dded76acb233adc8fdfe32857eda060bd1448e8b54585.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d0acd7e7257a715c10dded76acb233adc8fdfe32857eda060bd1448e8b54585.dll
Resource
win10v2004-20240226-en
Target
0d0acd7e7257a715c10dded76acb233adc8fdfe32857eda060bd1448e8b54585
Size
79KB
MD5
268cf574f311dd0098835a46443df960
SHA1
99f46272225b54d564a6eb6b2f9d2c2dd92fae5c
SHA256
0d0acd7e7257a715c10dded76acb233adc8fdfe32857eda060bd1448e8b54585
SHA512
cc036600aa261cf229f4b641ec89b48d984ffaf8f7529649ae7b0be9bf757c88e3054737e595ca399c94a747a2ee34753a8eb947002ae0494e2d36d3b954c4de
SSDEEP
1536:Hx+C7HlCfuyTU3kPITtlD4OP5+DP06oKsAqnk:Rj7HlYuMBIBNk0esAqnk
Checks for missing Authenticode signature.
resource |
---|
0d0acd7e7257a715c10dded76acb233adc8fdfe32857eda060bd1448e8b54585 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
GetProcAddress
Sleep
CloseHandle
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
LoadLibraryA
WriteProcessMemory
OpenProcess
GetCurrentProcessId
FindClose
FindNextFileA
FindFirstFileA
GetEnvironmentVariableA
lstrcmpiA
DisableThreadLibraryCalls
FreeLibrary
GetStringTypeW
GetLastError
HeapFree
HeapAlloc
RtlUnwind
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
LCMapStringW
MultiByteToWideChar
PathStripPathA
LGBT_Launch
LGBT_SelectDevice
LGBT_Terminate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ