JLI_CmdToArgs
JLI_GetStdArgc
JLI_GetStdArgs
JLI_Launch
JLI_ManifestIterate
JLI_MemAlloc
JLI_ReportErrorMessage
JLI_ReportErrorMessageSys
JLI_ReportExceptionDescription
JLI_ReportMessage
JLI_SetTraceLauncher
Static task
static1
Behavioral task
behavioral1
Sample
0a570b32d14799f6351ee211093567450d41705ca79e236a38ca15f135d78bfd.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a570b32d14799f6351ee211093567450d41705ca79e236a38ca15f135d78bfd.dll
Resource
win10v2004-20240226-en
Target
0a570b32d14799f6351ee211093567450d41705ca79e236a38ca15f135d78bfd
Size
189KB
MD5
71350559b82a839011886708dab1dd0e
SHA1
3acf4d3c1d981f19df0dbfd60919742df13142f9
SHA256
0a570b32d14799f6351ee211093567450d41705ca79e236a38ca15f135d78bfd
SHA512
a7607cdb35844e28b9748b01975469d1f2dfd1ef1e7ad10eb5f00a221ff7010246b0053627478c79066f643b98c6d92330c3b88807e9070e291c91298f689139
SSDEEP
3072:V8xWyIlfFTwLXtFGlvO4JTrICiiGXK1/BO9Cvh5y7kuQFP4eB/5AFUZ:V8xWyIdFwXPKTrI/iGa6OLy7jG5R
Checks for missing Authenticode signature.
resource |
---|
0a570b32d14799f6351ee211093567450d41705ca79e236a38ca15f135d78bfd |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sleep
SetErrorMode
GetLogicalDriveStringsW
OpenProcess
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
QueryDosDeviceW
lstrcmpiW
lstrcatW
VirtualProtect
CloseHandle
lstrcpyW
SetEndOfFile
CreateFileW
CreateFileA
WriteConsoleW
SetStdHandle
HeapReAlloc
GetStringTypeW
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
ExitProcess
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
LCMapStringW
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FlsGetValue
FlsFree
SetLastError
FlsAlloc
LoadLibraryW
GetLocaleInfoW
GetModuleFileNameW
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetProcessHeap
CallWindowProcA
SysFreeString
SysAllocStringLen
GetProcessImageFileNameW
JLI_CmdToArgs
JLI_GetStdArgc
JLI_GetStdArgs
JLI_Launch
JLI_ManifestIterate
JLI_MemAlloc
JLI_ReportErrorMessage
JLI_ReportErrorMessageSys
JLI_ReportExceptionDescription
JLI_ReportMessage
JLI_SetTraceLauncher
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ