__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
5e33d8ae5e10d3960927c35f05270827c0649b40da616a98321941ee1175d980.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5e33d8ae5e10d3960927c35f05270827c0649b40da616a98321941ee1175d980.exe
Resource
win10v2004-20240419-en
Target
5e33d8ae5e10d3960927c35f05270827c0649b40da616a98321941ee1175d980
Size
1.4MB
MD5
7d30a795e3fdfac51427f6a52499fe5d
SHA1
d46090f7f21e1e736c54c49278e404279c435f94
SHA256
5e33d8ae5e10d3960927c35f05270827c0649b40da616a98321941ee1175d980
SHA512
88436799192879aea118f7b9c54761d006cf7c7447f442c68f51c270f38175e8a7fe5d5fcb50b522f89e9224ef7a8f7b2e1717407358d41bd60be7011c930408
SSDEEP
24576:yQt12h3WigMBAY0O7++Wfdfz8xovbrGqKt47vSmVXDhRbEXYzuOgpM1SdubA9/O:Nt1cJ2YbelbPrGqU47a47EXYzu/Qo/
Checks for missing Authenticode signature.
resource |
---|
5e33d8ae5e10d3960927c35f05270827c0649b40da616a98321941ee1175d980 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@$badd$qpcr6TCdato
@TCG@$bctr$qpvsls
@TCG@$bctr$qv
@TCG@getS$qpvs
@TCG@letter_gcproceso$qv
@TCG@liberar_mem$qv
@TCG@set$qpvsl
@TCG@set_GScontrol$qv
@TCParamftos@$bctr$q9TEtipoftos
@TCParamftos@$bdtr$qv
@TCParamftos@create$q9TEtipoftos
@TCParamftos@destroy$qp11TCParamftos
@TCParamftos@getCfto$qv
@TCParamftos@get_linkcodef$qv
@TCParamftos@get_nftos$qv
@TCParamftos@get_nregCab$qv
@TCParamftos@get_tipo_fto$qv
@TCParamftos@isValidFto$qv
@TCagencia@$bctr$qs
@TCagencia@$bdtr$qv
@TCarrdat@$bctr$qcsssss
@TCarrdat@$bctr$qsss
@TCarrdat@$bdtr$qv
@TCarrdat@$bsubs$qs
@TCarrdat@crea_previs_externo$qsss
@TCarrdat@create$qcsssss
@TCarrdat@destroy$qp8TCarrdat
@TCarrdat@getS$qlpvs
@TCarrdat@getSfull$qlpvss
@TCarrdat@get_datoprevis$qv
@TCarrdat@get_item_fto$qs
@TCarrdat@getinprevis$ql
@TCarrdat@getinprevis$qpc
@TCarrdat@getinprevis$qr6TCdato
@TCarrdat@getinprevis$qs
@TCarrdat@limpiar$qv
@TCarrdat@nftogetin$qr8TCarrdats6TCdato
@TCarrdat@nftogetin$qr8TCarrdatsc
@TCarrdat@nftogetin$qr8TCarrdatsd
@TCarrdat@nftogetin$qr8TCarrdatsi
@TCarrdat@nftogetin$qr8TCarrdatsl
@TCarrdat@nftogetin$qr8TCarrdatspc
@TCarrdat@nftogetin$qr8TCarrdatss
@TCarrdat@nftogetout$qr8TCarrdatspc
@TCarrdat@nftogetout$qr8TCarrdatsr6TCdato
@TCarrdat@nftogetout$qr8TCarrdatsrc
@TCarrdat@nftogetout$qr8TCarrdatsrd
@TCarrdat@nftogetout$qr8TCarrdatsrl
@TCarrdat@nftogetout$qr8TCarrdatsrs
@TCarrdat@push$qpcs10TTipodatoC9TTipodato
@TCarrdat@putS$qlpvs
@TCarrdat@putSfull$qlpvss
@TCarrdat@set_CDpostit$qpc
@TCbase@calc_fecha_anterior$qls
@TCbase@calc_fecha_vencimiento$qlss
@TCbase@descomponer_fecha$qlpst2t2
@TCbase@difdias$qlls
@TCbase@existearch$qpcs
@TCbase@fillchar$qpcss
@TCbase@get_dif_anos_meses_dias$qllrst3t3
@TCbase@get_dif_mes$qll
@TCbase@get_name_mes$qs
@TCbase@get_nmes$qpc
@TCbase@get_tipofrec$qd
@TCbase@getcadfrecuencia$qspc
@TCbase@getdias_perconversion$qdss
@TCbase@getdiasfrecuencia$qsss
@TCbase@getfecha$qpl
@TCbase@getfecha_dia_anterior$ql
@TCbase@getfrecuencia$qs
@TCbase@gethora$qpc
@TCbase@getperiodofrecuencia$qs
@TCbase@instr$qpct1s
@TCbase@left$qpcui
@TCbase@lrtrim$qpcs
@TCbase@suma_fecha_dias$qlls
@TCcondition@$bctr$qpvi
@TCcondition@$bdtr$qv
@TCcondition@add$qrlpcls
@TCcondition@add$qrspcss
@TCcta@$bctr$qr6TCdatop6TSctass
@TCcta@$bctr$qrdp6TSctass
@TCcta@$bdtr$qqrv
@TCcta@activar_control$qs
@TCcta@codcta$qv
@TCcta@codcta_padre$qv
@TCcta@crear_reg_cta$qs
@TCcta@cta_sin_subdivisiones$qs
@TCcta@existe$qv
@TCcta@get_Sctas$qv
@TCcta@get_reg_cta$qs
@TCcta@grabar_bfefmov_otro_ano$ql
@TCcta@nivelcta$qv
@TCcta@verificar_cta_sin_subdivisiones$qr6TSctasspc
@TCdato@$badd$qpc
@TCdato@$badd$qr6TCdato
@TCdato@$basg$qpxc
@TCdato@$basg$qr6TCdato
@TCdato@$bctr$qqr9TTipodatoui
@TCdato@$bctr$qqrpxc
@TCdato@$bctr$qqrrx6TCdato
@TCdato@$bctr$qqrrx8TSdefstr
@TCdato@$bctr$qqruipxc
@TCdato@$bctr$qqruiuiui
@TCdato@$bctr$qqrv
@TCdato@$bdtr$qqrv
@TCdato@$brplu$qpc
@TCdato@$brplu$qr6TCdato
@TCdato@$bsubs$qui
@TCdato@create$q9TTipodatoui
@TCdato@create$quipxc
@TCdato@delchar$qui
@TCdato@delformato$qv
@TCdato@destroy$qp6TCdato
@TCdato@fillchar$qsss
@TCdato@fto_a_num$qv
@TCdato@getin$qc
@TCdato@getin$qd
@TCdato@getin$ql
@TCdato@getin$qpxc
@TCdato@getin$qs
@TCdato@getnamecodinx$qlls
@TCdato@getnamedefcod$qlss
@TCdato@inscad$qr6TCdatoui
@TCdato@inschar$qcui
@TCdato@jsprintf$qpce
@TCdato@lrtrim$qr6TCdatos
@TCdato@mid$qr6TCdatouiui
@TCdato@movcad$qr6TCdatoui
@TCdato@num_to_letter$qd16TTipoNumToLetter
@TCdato@putformato$qv
@TCdato@putformatoinx$qv
@TCdato@readr$ql
@TCdato@right$qr6TCdatoui
@TCdato@set_nameconcepto$qpc
@TCdato@tolower$qv
@TCdato@wherechar$qs
@TCdato@writer$ql
@TCfile@GAnfile
@TCfile@GAsize
@TCfile@GNSFLNINDEX
@TCfile@GSin
@TCfile@Ghand_base
@TCfile@Gnregsupnounico
@TCfile@act_agencia_principal$qo
@TCfile@activarinx$qs
@TCfile@agencias_habilitadas$qv
@TCfile@borrarinx$qspcls
@TCfile@buscarinx$qspcrlt3
@TCfile@buscarinxnounico$qspcrlt3i
@TCfile@cambiar_agencia_activa$qi
@TCfile@cargar_ruta$qpct19TTipoPathl
@TCfile@ccntonreg$qsl
@TCfile@closej$qsss
@TCfile@copyfromfile$qpcs9TTipoPath
@TCfile@creafile$qssso
@TCfile@existearch$qpc9TTipoPath
@TCfile@file_es_lock$qs
@TCfile@fnstrsec$qsspst3
@TCfile@get_agencia_activa$qv
@TCfile@get_client_object$qv
@TCfile@get_namefile_cliente$qpcsd
@TCfile@get_namefile_unico$qpcss
@TCfile@getccn$qslo
@TCfile@getnamefile$qrx8TSnomfilspcs
@TCfile@getposcampo$qr8TSdefstrsssss
@TCfile@inic_file_warning$qso
@TCfile@inic_lectura_memos$qslpcss
@TCfile@init_module$qv
@TCfile@insertarinx$qspcls
@TCfile@leer_linea_memo$qppcpc
@TCfile@lockr$qslls
@TCfile@mreadr$qssslpvl
@TCfile@mwriter$qssslpvl
@TCfile@nextccn$qs
@TCfile@nreg_valido$qslss
@TCfile@nregmax$qsl
@TCfile@openj$qsss
@TCfile@printerror$qpce
@TCfile@printwarning$qpce
@TCfile@readmemo$qslpcss
@TCfile@readr$qslpvlo
@TCfile@tipo_multiple$qv
@TCfile@unlockr$qs
@TCfile@unlockrone$qsl
@TCfile@updateinxnounico$qiipct3pvt3
@TCfile@writememo$qslpco
@TCfile@writer$qslpvlo
@TCfilext@$bctr$qiui
@TCfilext@$bctr$qpcuisss
@TCfilext@$bdtr$qv
@TCfilext@create$qpcuisss
@TCfilext@destroy$qp8TCfilext
@TCfilext@get_size_file$qv
@TCfilext@insertarinx$qpcls
@TCfilext@nregmax$qv
@TCfilext@readr$qlpvll
@TCfilext@writer$qlpvll
@TCfilextCSV@$bctr$qpcr8TCarrdatsssss
@TCfilextCSV@$bctr$qpcsssss
@TCfilextCSV@$bdtr$qv
@TCfilextCSV@get_registro$qrls
@TCfilextCSV@set_registro$qr8TCarrdatl
@TCfilextCSV@validar_registros$qv
@TCftobase@setAutofill$qs
@TCftobase@setPrecedence$qss
@TCget@defcodnov$qs
@TCget@es_activo$qd
@TCget@es_tiponota$qs
@TCget@esta_en_vacaciones$qll
@TCget@get_calificacion$qrx11TScreclasif
@TCget@get_constante$qss
@TCget@get_contrasenaxdefecto$qpclt1
@TCget@get_estado_mes$qss
@TCget@get_fecha_saldo$qrx8TScsaldorx8TScdircbss
@TCget@get_name_tasa$qdr6TCdato
@TCget@get_nameusuarioxdefecto$qlcpc
@TCget@get_nlineas_max$qs
@TCget@get_nombre_cliente$qr6TCdator10TSclientess
@TCget@get_nombre_xmodulo$qpvsp6TCdatoss
@TCget@get_nsfl_clasesubaux$qqrss
@TCget@get_nsubcbte_libre$qsls
@TCget@get_rotativo_normal$qr9TScsubaux
@TCget@get_saldo$qr8TScsaldolss
@TCget@get_saldo_mes_anterior$qslssr8TScsaldos
@TCget@get_subrel$qrx8TSsubauxr8TSrelcars
@TCget@get_tasa$qsddls
@TCget@get_tasas$qdsrdt3t3
@TCget@get_tipo_pago$qs
@TCget@get_valor_rangos$qlspcdd
@TCget@getagencia_xccn$qslplp6TCdatot4
@TCget@getconcepto$qdlr6TCdatot3ct3t3
@TCget@getconcepto$qpvslssr6TCdatopsp6TCdatoplt7t9t9
@TCget@getfecha_es_dia_habil$qls
@TCget@getname_nit_xccn$qpvslp6TCdatot4pls
@TCget@getname_xnit$qpvsr6TCdatot3plt5s
@TCget@getnnomina$qspc
@TCget@getnsflmaest_subcbte$qs
@TCget@getnsflnindex_subcbte$qs
@TCget@gettipo_modulo$qss
@TCget@getultrec$qs
@TCget@nsflauxil$qs
@TCget@nsflauxm$qs
@TCget@nsfldircb$qs
@TCget@nsfldirnov$qs
@TCget@nsfldirsa$qs
@TCget@nsflmodulo$qs
@TCget@nsflmovaux$qs
@TCget@nsflmovi$qs
@TCget@nsflnovedad$qs
@TCget@nsflrec$qs
@TCget@nsflsaldo$qs
@TCget@tasa_equiv_frecuencia$qddds
@TCget@tiporec$qsr6TCdato
@TCidentidad@registrar_usuario$qpct1t1t1t1sl
@TCio@$bctr$q12TReportViewsr8TCarrdat
@TCio@$bctr$qr8TCarrdato
@TCio@$bdtr$qv
@TCio@add_multimedia$q21TTipoExternalResourceopc
@TCio@finalizar_reporte$qv
@TCio@fskippag$qv
@TCio@get_CRdatos$qv
@TCio@get_window$qv
@TCio@habilitar_mensajeria$qv
@TCio@initmsg$qs
@TCio@insertar_boton$qpct1it1
@TCio@printmsg$qpcs15TTipoAlineacion
@TCio@reconfigurar$qsr6TCdato
@TCio@reporte_memotexto$qr8TCfilextso
@TCio@reportes$qp8TCarrdat
@TCio@reportes$qpco
@TCio@reportes$qv
@TCio@reportes_firmas$qpc
@TCio@reportes_subtitulo$qpcui
@TCio@reportes_titulo$qpcui
@TCio@reportes_totalizar$qr8TCarrdato
@TCio@set_datos_mensajeria$qpct1
@TCio@verifymultimedia$qpc21TTipoExternalResource
@TCio@visualizar$qr8TCarrdat
@TCio@visualizar$qv
@TCptAstr@create$qss
@TCptAstr@destroy$qp8TCptAstr
@TCptAstr@jread$qslss
@TCptAstr@jwrite$qslss
@TCptAstr@push$qpvls
@TCptString@$bdtr$qv
@TCrecordset@$bctr$qip11TCconditionpv
@TCrecordset@$bctr$qrlr8TSdefcodso
@TCrecordset@$bdtr$qv
@TCrecordset@get_nreg$qv
@TCrecordset@next$qv
@TCsbase@$bctr$qqrss
@TCsbase@$bdtr$qv
@TCsbase@GptCio
@TCsbase@act_entorno$qr8TCarrdatrlpp8TCptAstrs
@TCsbase@actualizar$qs
@TCsbase@borrar_reg$qr8TCarrdatl
@TCsbase@cerrar$qs
@TCsbase@configurar$qv
@TCsbase@crear$qs
@TCsbase@ejecutar$qr8TCarrdatss
@TCsbase@eliminar$qr8TCarrdatls
@TCsbase@fctrlkey$qr8TCarrdatss
@TCsbase@fnsfl$qqrv
@TCsbase@fnstr$qqrv
@TCsbase@fopcionmenu$qs
@TCsbase@get_row$qr8TCarrdatl
@TCsbase@grabar$qr8TCarrdatls
@TCsbase@grabar_rec$qr8TCarrdat
@TCsbase@gramod$qr4TCiospc
@TCsbase@gramod$qr8TCarrdats
@TCsbase@gramodindex$qqrl
@TCsbase@importar$qr8TCarrdatpc
@TCsbase@insert_reg$qr8TCarrdatl
@TCsbase@leer$qr8TCarrdatrlpp8TCptAstrs
@TCsbase@leerlista$qr8TCarrdatsssl
@TCsbase@m_nreg_poligramod
@TCsbase@m_ptCRdatos
@TCsbase@m_ptCRpredatos
@TCsbase@m_ptSdirman
@TCsbase@mover_reg$qll
@TCsbase@poligramod$qr8TCarrdatspcs
@TCsbase@postverificar$qr8TCarrdat
@TCsbase@preftout$qspc
@TCsbase@preftout$qsr6TCdato
@TCsbase@preftout$qsrc
@TCsbase@preftout$qsrd
@TCsbase@preftout$qsrl
@TCsbase@preftout$qsrs
@TCsbase@pregramod$qr8TCarrdats
@TCsbase@preverificar$qr8TCarrdatrsr6TCdatot3
@TCsbase@previsualizar$qr8TCarrdats
@TCsbase@ptselec_multiple
@TCsbase@reportes$qr8TCarrdats
@TCsbase@retirar$qr8TCarrdats
@TCsbase@sellar$qs
@TCsbase@set_name_proceso$qr6TCdato
@TCsbase@set_row$qr8TCarrdatl
@TCsbase@tipo_uso_poligramod
@TCsbase@verificarpredatos$qr8TCarrdatrs
@TCsbase@visitar$qpvls
@TCsbase@visnftogetin$qr8TCarrdats6TCdato
@TCsbase@visnftogetin$qr8TCarrdatsc
@TCsbase@visnftogetin$qr8TCarrdatsd
@TCsbase@visnftogetin$qr8TCarrdatsi
@TCsbase@visnftogetin$qr8TCarrdatsl
@TCsbase@visnftogetin$qr8TCarrdatspc
@TCsbase@visnftogetin$qr8TCarrdatss
@TCsmaestro@$bctr$qss
@TCsmaestro@$bdtr$qv
@TCsmaestro@ejecutar$qr8TCarrdatss
@TCsmaestro@reporte_reg$qr4TCiol
@TCsmaestro@reportes$qr8TCarrdats
@TCsmaestro@selec_regs_reportes$qss
@TCsmaestro@seleccionar_registros$qr4TCiopqr4TCiol$vl
@TCsystem@$bctr$qv
@TCsystem@encripta_clave_ue$qpct1
@TCsystem@prepasswordcontrol$qv
@TCverifi@es_ult_mes$qss
@TCverifi@flag_flujo_efectivo$qd
@TCverifi@grabarultrec$qsl
@TCverifi@mes_contable$qss
@TCverifi@solicitar_huella$qpxcpci
@TCverifi@ubicarnsubaux$qssr8TSsubaux
@TCverifi@ubicarnsubauxppal$qssr8TSsubaux
@TCverifi@validafecha$ql
@TCverifi@verifica_tdr_multiple$qss
@TCverifi@verificar_agencia$qss
@TCverifi@verificar_ccnxagencia$qslrlr6TCdatot4pv
@TCverifi@verificar_detector_biometrico$qv
@TCverifi@verificar_dirsa_x_retiro$qslpst3ss
@TCverifi@verificar_nrecreversado$qsl
@TCverifi@verificar_nsubcbtes_int$qr8TSsubauxt1
@TCverifi@verificar_ruta$qpc
@TCverifi@verificar_saldos_x_retiro$qslpst3dsss
@TCverifi@verificar_subruta$qpc
@TCverifi@verificar_usura$qpspd
@TCverifi@verificasubaux$qr6TCdato
@TCverpro@$bctr$qlpcp12TIControllero
@TCverpro@$bdtr$qv
@TCverpro@proceso$ql
@get_GSbase$qv
@get_TCG$qv
@get_TCinx$qv
@get_ptACs$qv
_GCmaestro
___CPPdebugHook
@System@initialization$qqrv
@System@Finalization$qqrv
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@FindHInstance$qqrpv
@System@@LStrFromPChar$qqrr17System@AnsiStringpc
@System@@LStrAsg$qqrpvpxv
@System@@LStrClr$qqrpv
@System@@HandleFinally$qqrv
@System@IsMemoryManagerSet$qqrv
@System@SetMemoryManager$qqrrx23System@TMemoryManagerEx
@System@IsMultiThread
@System@IsConsole
@System@ExitProc
@System@CmdLine
@System@IsLibrary
@System@MainInstance
@Sysconst@initialization$qqrv
@Sysconst@Finalization$qqrv
@Types@initialization$qqrv
@Types@Finalization$qqrv
@Imagehlp@initialization$qqrv
@Imagehlp@Finalization$qqrv
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Rtlconsts@initialization$qqrv
@Rtlconsts@Finalization$qqrv
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Typinfo@DotSep
@Typinfo@BooleanIdents
ord2
FreeLibrary
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
@$bdele$qpv
@$bdla$qpv
@$bnew$qui
@$bnwa$qui
@_CatchCleanup$qv
@_InitTermAndUnexPtrs$qv
@_ReThrowException$quipuc
__ErrorExit
___CRTL_MEM_GetBorMemPtrs
___CRTL_MEM_UseBorMM
___CRTL_TLS_Alloc
___CRTL_TLS_ExitThread
___CRTL_TLS_Free
___CRTL_TLS_GetValue
___CRTL_TLS_InitThread
___CRTL_TLS_SetValue
____ExceptionHandler
___errno
___raiseDebuggerException
___terminatePTR
__argc
__argv
__argv_default_expand
__exitargv
__ftol
__handle_exitargv
__handle_setargv
__handle_wexitargv
__handle_wsetargv
__lstrupr
__ltoupper
__setargv
__startup
__wargv_default_expand
_abort
_atof
_atol
_ceil
_fclose
_fflush
_floor
_fopen
_fread
_fseek
_isdigit
_itoa
_log10
_ltoa
_memcpy
_memmove
_memset
_pow
_sprintf
_strcat
_strlen
_strncpy
_strstr
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ