?__cjwwbfxyax@@YAKXZ
?__evazso@@YADXZ
?__irdbeol@@YANXZ
?__jcurznorajewmm@@YAHXZ
?__ovyiolxfuuw@@YANXZ
?__vjulqnapain@@YAOXZ
?__xigfqdrygm@@YAJXZ
?__xwzlnkzjfrfq@@YA_JXZ
Static task
static1
Behavioral task
behavioral1
Sample
e56611f34fbcf426f6c212da677fc9e0e6a64840d7da393a0f008e3c363a063f.dll
Resource
win7-20231129-en
Target
e56611f34fbcf426f6c212da677fc9e0e6a64840d7da393a0f008e3c363a063f
Size
6.4MB
MD5
325842488c0096f1b4572f0c79bb4f0c
SHA1
e0e94604b5a38707d2e887604f972394e6036e6e
SHA256
e56611f34fbcf426f6c212da677fc9e0e6a64840d7da393a0f008e3c363a063f
SHA512
52142fb9a1de3e8d9e2982822091ee3cbed1c9ad40ee012e8981a671060fe6162bc6815f49e59ae950c7e2c149f23911c21baf5af757a889766a767730a89afd
SSDEEP
196608:C+HMsgx7T7cl0uPv0jsz4FDvvSd3qgX3Y3fh:HgxRKamL6J
Checks for missing Authenticode signature.
resource |
---|
e56611f34fbcf426f6c212da677fc9e0e6a64840d7da393a0f008e3c363a063f |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OutputDebugStringW
LoadLibraryExW
SetFilePointerEx
ReadFile
GetConsoleMode
SetStdHandle
FlushFileBuffers
CloseHandle
GetModuleFileNameW
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
WriteConsoleW
ReadConsoleW
CreateFileW
SetEndOfFile
VerSetConditionMask
GetLastError
VerifyVersionInfoW
LoadLibraryW
WritePrivateProfileStringW
SetThreadPriority
GetConsoleCP
CompareFileTime
GetFileType
GetStdHandle
GetOEMCP
GetACP
WideCharToMultiByte
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeW
HeapFree
GetSystemTimeAsFileTime
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
GetProcessHeap
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
IsValidCodePage
MessageBoxA
GetSystemMetrics
ShowOwnedPopups
EndPaint
KillTimer
GetClientRect
GetScrollInfo
GetWindowTextW
TrackPopupMenu
DefWindowProcA
DestroyCaret
EnumChildWindows
ScrollWindowEx
SetWindowTextA
SetDlgItemTextA
GetDC
GetKeyboardLayout
SetWindowLongW
SetWindowsHookExA
GetDesktopWindow
LoadCursorA
EnableMenuItem
LineTo
GetPaletteEntries
CreatePenIndirect
SetMapMode
Rectangle
GetTextExtentExPointA
EndPage
ExtTextOutA
MoveToEx
RegUnLoadKeyW
RegLoadKeyW
SHGetFileInfoW
SafeArrayGetLBound
?__cjwwbfxyax@@YAKXZ
?__evazso@@YADXZ
?__irdbeol@@YANXZ
?__jcurznorajewmm@@YAHXZ
?__ovyiolxfuuw@@YANXZ
?__vjulqnapain@@YAOXZ
?__xigfqdrygm@@YAJXZ
?__xwzlnkzjfrfq@@YA_JXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ