GetUserString
VMRuntime
Static task
static1
Behavioral task
behavioral1
Sample
RomensC2020X64.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
RomensC2020X64.dll
Resource
win10v2004-20240508-en
Target
RomensC2020X64.dll
Size
3.0MB
MD5
d42aab51d50e30f4e2a9ff2ffe04465f
SHA1
10827cdd9d14eb8499f0c8c9dc2213d1882be2cb
SHA256
168f46aeaf818403c55fa62ad31bca4980c519d6f3bf56c6a8d667479b715b8d
SHA512
536cb65b8b9f53f42f4410c60adf52e90960078425a62cc8c7cb24be73b5906e3ce0d98cb1859ab264a2ada2e92d72864444bd9d9d633a24e08b7a0bdfe8dc8d
SSDEEP
49152:8NGHYELcj/DNoEFLIqgVEIRVIxgrJzaZUvaPgnKAEoyAcE1oUvRoyXlNcL6ErwL:8WoZoEhQyezmZA1uzoceF
Checks for missing Authenticode signature.
resource |
---|
RomensC2020X64.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetCurrentProcess
GetModuleFileNameA
__C_specific_handler
GetModuleHandleA
ReadFile
CreateFileA
InitializeCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
IsBadReadPtr
ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
WaitForSingleObject
CloseHandle
CreateEventA
DisableThreadLibraryCalls
lstrcatA
VirtualProtect
lstrlenA
Sleep
GetPrivateProfileIntA
SetEvent
GetVolumeInformationA
GetWindowsDirectoryA
SetEnvironmentVariableA
GetCurrentProcessId
MultiByteToWideChar
GetLastError
CompareStringA
CompareStringW
HeapFree
GetProcessHeap
GetTickCount
SetFilePointer
QueryPerformanceCounter
GetEnvironmentStringsW
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
HeapCreate
HeapSetInformation
IsValidCodePage
GetOEMCP
GetCPInfo
GetStartupInfoA
GetFileType
SetHandleCount
GetTimeZoneInformation
GetStdHandle
WriteFile
RtlVirtualUnwind
FlsAlloc
TlsSetValue
SetLastError
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
GetSystemTimeAsFileTime
ExitThread
ResumeThread
CreateThread
GetCurrentThreadId
FlsSetValue
GetCommandLineA
FlsGetValue
TlsFree
FlsFree
MessageBoxA
UnregisterClassA
wsprintfA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
SysAllocString
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetElement
SafeArrayDestroyDescriptor
SysStringByteLen
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayCreate
VariantCopyInd
VariantChangeType
VariantClear
VariantInit
SysFreeString
SafeArrayUnlock
SafeArrayLock
SafeArrayGetUBound
SafeArrayGetLBound
GetErrorInfo
SysStringLen
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
GetUserString
VMRuntime
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ