ArmaKM_Generate
ArmaKM_GetEncryptionTemplate
ArmaKM_GetFlagSingleKey
Static task
static1
Behavioral task
behavioral1
Sample
8049f9e759da5e3ac2432549ede65f91e9449d21b34e9d4d1081372a17f97a90.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8049f9e759da5e3ac2432549ede65f91e9449d21b34e9d4d1081372a17f97a90.dll
Resource
win10v2004-20240412-en
Target
8049f9e759da5e3ac2432549ede65f91e9449d21b34e9d4d1081372a17f97a90
Size
64KB
MD5
5e1f95bfe302002b104fbca38acb5fe7
SHA1
9dc225439d82477e55ddbaba909db6abeab4d9f7
SHA256
8049f9e759da5e3ac2432549ede65f91e9449d21b34e9d4d1081372a17f97a90
SHA512
c01b264ef720e0dae069256278ca90d9abc066ad18dc0fc1a9fcdf1f8afa6a349361605b448f6697a61c0fffff2b1ff79f2fa6c659f58a9799e24a758c03d0c0
SSDEEP
1536:0+AvG8s63+yCKaqTlmPGOw/eB0p823og:98rN+LV5AYO3og
Checks for missing Authenticode signature.
resource |
---|
8049f9e759da5e3ac2432549ede65f91e9449d21b34e9d4d1081372a17f97a90 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
lstrcatA
lstrlenA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
RtlUnwind
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
ArmaKM_Generate
ArmaKM_GetEncryptionTemplate
ArmaKM_GetFlagSingleKey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ