load
run
zidingyixiugaidaochuhanshu
Static task
static1
Behavioral task
behavioral1
Sample
c3a2884eaf355abbe8fc384669b0a0cd3d857aa6a5770e345e62d667a131d28e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3a2884eaf355abbe8fc384669b0a0cd3d857aa6a5770e345e62d667a131d28e.dll
Resource
win10v2004-20240419-en
Target
c3a2884eaf355abbe8fc384669b0a0cd3d857aa6a5770e345e62d667a131d28e.dll
Size
106KB
MD5
073822bb243b3be2d02d2a6daeebf24c
SHA1
b269bdc10e5b16eff49ca2c71277ed21bcf301c4
SHA256
c3a2884eaf355abbe8fc384669b0a0cd3d857aa6a5770e345e62d667a131d28e
SHA512
3a76793f289725820a2106088913401e8d5b1c1146fab692f26d91f4cb660b55c2ce26d47bc849149f2e0fcb22f8ee4d951fa8b71fa32e7e4579b74804895951
SSDEEP
1536:NLzXF9S71HAfYoMv/BfPqSynD4cz/s6oN+BeOnEtKX6tkyn05HGYX5za:RbF471RPqSynEczkUfEtMHXX5za
Checks for missing Authenticode signature.
resource |
---|
c3a2884eaf355abbe8fc384669b0a0cd3d857aa6a5770e345e62d667a131d28e.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSectionAndSpinCount
HeapDestroy
LeaveCriticalSection
HeapCreate
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetEvent
Sleep
CreateEventA
GetLastError
CloseHandle
GetCurrentThreadId
SwitchToThread
SetLastError
WideCharToMultiByte
lstrlenW
InterlockedExchange
InterlockedCompareExchange
CreateEventW
CancelIo
TryEnterCriticalSection
SetWaitableTimer
CreateWaitableTimerW
GetThreadContext
SetThreadContext
OpenProcess
GetFileAttributesA
GetExitCodeProcess
CreateProcessA
GetSystemDirectoryA
VirtualAllocEx
WriteProcessMemory
ResumeThread
CreateThread
CreateFileW
HeapFree
InterlockedDecrement
InterlockedIncrement
HeapAlloc
VirtualAlloc
ResetEvent
VirtualFree
LCMapStringW
WriteConsoleW
SetStdHandle
GetStringTypeW
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
FlushFileBuffers
LoadLibraryW
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
HeapReAlloc
HeapSize
GetProcessHeap
ExitThread
DecodePointer
EncodePointer
GetCommandLineA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetHandleCount
GetFileType
GetStartupInfoW
PeekMessageW
TranslateMessage
MsgWaitForMultipleObjects
DispatchMessageW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW
RegSetValueExW
shutdown
WSACreateEvent
WSASetLastError
WSAResetEvent
WSAIoctl
connect
WSAStartup
WSAEventSelect
htons
setsockopt
WSACleanup
recv
socket
closesocket
gethostbyname
send
WSAEnumNetworkEvents
WSAGetLastError
WSACloseEvent
select
WSAWaitForMultipleEvents
timeGetTime
load
run
zidingyixiugaidaochuhanshu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ