_Z6printfPKcz
_Z7fprintfP6_iobufPKcz
loadPlugin
unloadPlugin
Static task
static1
Behavioral task
behavioral1
Sample
21e0d425f9334b9ebb273db6fc7deba630ae5b9effb7512aaafaa80ad4ae358d.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
21e0d425f9334b9ebb273db6fc7deba630ae5b9effb7512aaafaa80ad4ae358d.dll
Resource
win10v2004-20240611-en
Target
21e0d425f9334b9ebb273db6fc7deba630ae5b9effb7512aaafaa80ad4ae358d
Size
213KB
MD5
4147f90433b16bc3d3539f06a0370c0a
SHA1
1089b06417b23e7bbb24a80375ed52aabfd78c01
SHA256
21e0d425f9334b9ebb273db6fc7deba630ae5b9effb7512aaafaa80ad4ae358d
SHA512
3a8fb530289a06bc0c0f16b9fabf9087262110017d945388c3df62c5d5ba8435cb480b6dc5628e4d1441722211adcbf8a28a90c1052a8945b8c4d21249574044
SSDEEP
3072:Cqy/xw1Zha7x9iMS2B7+YlIeBwP4kkzBiXSUpJOzb6G:C5xw1ZA9idbYlvBekztSY6G
Checks for missing Authenticode signature.
resource |
---|
21e0d425f9334b9ebb273db6fc7deba630ae5b9effb7512aaafaa80ad4ae358d |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
_Z11BstrcasecmpPKcS0_
_Z12str_to_int64PKc
_Z13GetPoolMemoryi
_Z13bstrinlinecpyPcPKc
_Z14FreePoolMemoryPc
_Z4MmsgR7PoolMemPKcz
_Z8PmStrcatR7PoolMemPKc
_Z8PmStrcpyR7PoolMemPKc
_Unwind_Resume
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
exit
fputc
free
fwrite
localeconv
malloc
memcpy
memset
realloc
strchr
strerror
strlen
strncmp
vfprintf
wcslen
_strdup
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZSt19__throw_logic_errorPKc
_ZdlPvy
__gxx_personality_seh0
PyCallable_Check
PyCapsule_Import
PyDict_GetItemString
PyErr_Fetch
PyErr_NormalizeException
PyErr_Occurred
PyEval_AcquireThread
PyEval_ReleaseThread
PyEval_RestoreThread
PyEval_SaveThread
PyImport_Import
PyImport_ImportModule
PyList_Append
PyList_Insert
PyLong_AsLong
PyModule_GetDict
PyObject_CallFunctionObjArgs
PySys_GetObject
PyThreadState_Swap
PyUnicode_AsUTF8
PyUnicode_FromString
Py_EndInterpreter
Py_Finalize
Py_InitializeEx
Py_IsInitialized
Py_NewInterpreter
_PyObject_CallMethod_SizeT
_Py_Dealloc
_Py_NoneStruct
_Z6printfPKcz
_Z7fprintfP6_iobufPKcz
loadPlugin
unloadPlugin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ