_main@4
main
Static task
static1
Behavioral task
behavioral1
Sample
5847c8b8f54c60db939b045d385aba0795880d92b00d28447d7d9293693f622b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5847c8b8f54c60db939b045d385aba0795880d92b00d28447d7d9293693f622b.dll
Resource
win10v2004-20240226-en
Target
5847c8b8f54c60db939b045d385aba0795880d92b00d28447d7d9293693f622b
Size
84KB
MD5
10b52c1ccaba52a52c991b05704bb12e
SHA1
878b2b8543ee103841cf30af70813b1c27434d71
SHA256
5847c8b8f54c60db939b045d385aba0795880d92b00d28447d7d9293693f622b
SHA512
6bc27f2705e576e128eab063e4027c5f48d208ca5b28b23ce6716712c19f1ac659633107e54ea01c50a5c07319b7003c96ad61beeff1f0590ea70191db2c94f1
SSDEEP
1536:CTL207TOA5A87mcUViursNgkyvipB52w:CTL207TlACmRPIivmB52w
Checks for missing Authenticode signature.
resource |
---|
5847c8b8f54c60db939b045d385aba0795880d92b00d28447d7d9293693f622b |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileSize
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
ReadFile
CreateFileW
FlushFileBuffers
GetFileTime
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
OutputDebugStringA
GetTickCount
WaitForMultipleObjectsEx
CreateEventW
WaitForSingleObject
CancelIo
GetCurrentProcess
GetComputerNameW
GetSystemDefaultLCID
Sleep
GetVersionExW
IsWow64Process
PeekNamedPipe
TerminateThread
CreateProcessA
TerminateProcess
GetSystemDirectoryA
DisconnectNamedPipe
GetStartupInfoA
LocalAlloc
WaitForMultipleObjects
CreatePipe
GetOEMCP
LocalFree
CreateThread
GetProcAddress
GetModuleHandleA
GetVolumeInformationW
InterlockedIncrement
InterlockedDecrement
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GetSystemInfo
CreateIoCompletionPort
GetSystemTimeAsFileTime
GetDiskFreeSpaceExW
FindNextFileW
lstrcmpiW
QueryDosDeviceW
FindClose
GetLastError
GetDriveTypeW
FindFirstFileW
LockResource
SizeofResource
LoadResource
FreeResource
FindResourceA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
VirtualAlloc
HeapReAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
SetErrorMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapFree
HeapAlloc
wsprintfA
wsprintfW
MessageBoxA
RegSetValueExW
RegCloseKey
RegOpenKeyExW
FreeSid
AllocateAndInitializeSid
GetUserNameW
RegQueryValueExW
EqualSid
RegCreateKeyExW
GetTokenInformation
OpenProcessToken
CoCreateGuid
getpeername
WSAIoctl
connect
WSAStartup
WSARecv
WSASend
WSAGetLastError
htons
getsockname
shutdown
setsockopt
WSAGetOverlappedResult
closesocket
ioctlsocket
gethostbyname
send
getsockopt
select
socket
_main@4
main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ