encrypt
sub_87568
sub_8930C
sub_8B2F4
sub_8D114
sub_8F0B0
sub_910A8
sub_92E08
sub_94BDC
sub_96984
sub_985E0
sub_9A490
sub_9C42C
sub_9E1C4
sub_9E9D8
Static task
static1
Behavioral task
behavioral1
Sample
9abda8c11488b5bdd40bb51454fb7d34c5c7dc27ac97d7899767de5f32aca2c5.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9abda8c11488b5bdd40bb51454fb7d34c5c7dc27ac97d7899767de5f32aca2c5.dll
Resource
win10v2004-20240508-en
Target
9abda8c11488b5bdd40bb51454fb7d34c5c7dc27ac97d7899767de5f32aca2c5
Size
339KB
MD5
659e64baa48c4f1a54528f72681916ac
SHA1
0f782c4a5b83d69cecf5cc666627b7c1fc2a7f61
SHA256
9abda8c11488b5bdd40bb51454fb7d34c5c7dc27ac97d7899767de5f32aca2c5
SHA512
3a9206afefcf3b1ea0093535a88ccfb573df17c70e38faf758949ff9e7bcf7c4b1c3e71daac237213376e375a491361cea28b9e60c680dbc537f2674e976ea5e
SSDEEP
6144:sBFGWIEdBIhbHsLdZcQuaT0KsoFNQdnZvnWd3XZXeVbgpivneKyKCoqzyleqiKyE:vbHLdJXL
Checks for missing Authenticode signature.
resource |
---|
9abda8c11488b5bdd40bb51454fb7d34c5c7dc27ac97d7899767de5f32aca2c5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
__dllonexit
__iob_func
_amsg_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf
encrypt
sub_87568
sub_8930C
sub_8B2F4
sub_8D114
sub_8F0B0
sub_910A8
sub_92E08
sub_94BDC
sub_96984
sub_985E0
sub_9A490
sub_9C42C
sub_9E1C4
sub_9E9D8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ