load
run
zidingyixiugaidaochuhanshu
Static task
static1
Behavioral task
behavioral1
Sample
a676c7490086a411_4560_130762355022815352024.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a676c7490086a411_4560_130762355022815352024.dll
Resource
win10v2004-20240508-en
Target
a676c7490086a411_4560_130762355022815352024
Size
130KB
MD5
48e5c2c4a3981c75c839f2c9379c0fd5
SHA1
96736ecd4d5a5fabf0b31f6188e7ddc04df55307
SHA256
a676c7490086a4112f920936e57ee49e213aaffd12bb38bc433a073ddfae0f24
SHA512
e6924564ebc2f6c0d5d7b65f934c2d94dc7d5389392a4446914d9913a3006955f4dfdbc180b6092c4c0046d4da39138a6f4cc41628a148efcb4e05b6ba086e98
SSDEEP
3072:/plm4JK5hnxC0d3xTQKhdmp+fKEt5Oq+1wpBnUmk0qsQU:/plmX5ZIwhTQMmwfKEt5ljgBU
Checks for missing Authenticode signature.
resource |
---|
a676c7490086a411_4560_130762355022815352024 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
HeapCreate
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetEvent
Sleep
CreateEventA
GetLastError
CloseHandle
GetCurrentThreadId
SwitchToThread
SetLastError
WideCharToMultiByte
lstrlenW
ResetEvent
LeaveCriticalSection
CancelIo
TryEnterCriticalSection
SetWaitableTimer
CreateWaitableTimerW
GetThreadContext
SetThreadContext
OpenProcess
GetExitCodeProcess
CreateProcessA
GetSystemDirectoryA
VirtualAllocEx
WriteProcessMemory
ResumeThread
CreateThread
CreateFileW
HeapDestroy
InitializeCriticalSectionAndSpinCount
HeapFree
HeapAlloc
VirtualAlloc
CreateEventW
VirtualFree
LCMapStringW
WriteConsoleW
SetStdHandle
GetStringTypeW
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
HeapReAlloc
HeapSize
GetProcessHeap
ExitThread
DecodePointer
EncodePointer
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FlsGetValue
FlsFree
FlsAlloc
RtlUnwindEx
SetHandleCount
GetFileType
PeekMessageW
TranslateMessage
MsgWaitForMultipleObjects
DispatchMessageW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW
RegSetValueExW
WSACreateEvent
WSASetLastError
WSAResetEvent
WSAWaitForMultipleEvents
WSAIoctl
connect
WSAStartup
shutdown
htons
setsockopt
WSACleanup
recv
socket
closesocket
gethostbyname
send
WSAEnumNetworkEvents
WSAGetLastError
WSACloseEvent
select
WSAEventSelect
timeGetTime
load
run
zidingyixiugaidaochuhanshu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ