Login
Logout
ModCleanUp
ModOnMsgRecv
ModStartUp
ModStatus
Static task
static1
Behavioral task
behavioral1
Sample
a5a73eec6072aa5136dc87c01e15611542119df58503a67e5d19329d0b0393f4.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5a73eec6072aa5136dc87c01e15611542119df58503a67e5d19329d0b0393f4.dll
Resource
win10v2004-20240709-en
Target
a5a73eec6072aa5136dc87c01e15611542119df58503a67e5d19329d0b0393f4
Size
380KB
MD5
86c8066b11bf5e08cdfdfcde41682673
SHA1
f523dcb6700e080d182a4fe4c52707a83d222a3f
SHA256
a5a73eec6072aa5136dc87c01e15611542119df58503a67e5d19329d0b0393f4
SHA512
ca3ab0c86e068fd1b322d8b3e43bfca2a73d6c894ca914c86f67f2c996d3e57afef3ea438491af29c7cd52e6dd27c84d1805786379016e26f938f21165542d21
SSDEEP
6144:rYTYwa9T15gncPZaRQFe/uM6V/eU6lcRESPIAnuUHKkohCpUo:0ThO5Wc4QFEuM6VJ6UEUtf
Checks for missing Authenticode signature.
resource |
---|
a5a73eec6072aa5136dc87c01e15611542119df58503a67e5d19329d0b0393f4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemTime
OutputDebugStringW
LocalFree
FormatMessageA
GetLastError
WriteFile
SetEndOfFile
SetFilePointer
CreateThread
DeviceIoControl
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentProcess
GetUserDefaultLangID
TerminateThread
GetSystemInfo
GetExitCodeThread
WaitForSingleObject
CloseHandle
CreateMutexA
GetProcAddress
GetModuleHandleW
WideCharToMultiByte
ReleaseMutex
InterlockedIncrement
InterlockedDecrement
OutputDebugStringA
LocalAlloc
EnterCriticalSection
GetSystemWindowsDirectoryA
ResetEvent
SetEvent
GetFileTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
CreateDirectoryA
FindFirstFileA
FindNextFileA
GetTickCount
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
ReadFile
OpenFile
SetFileAttributesA
GetFileAttributesA
DeleteFileA
CopyFileA
MoveFileA
GetTempPathA
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
FindClose
VirtualQuery
GetCurrentProcessId
Process32Next
Process32First
CreateToolhelp32Snapshot
RemoveDirectoryA
LoadLibraryExA
FindResourceA
GetSystemDirectoryA
OpenProcess
TerminateProcess
GetModuleFileNameA
LoadResource
LockResource
lstrcmpiW
MoveFileExA
MultiByteToWideChar
GetModuleHandleA
DisconnectNamedPipe
ConnectNamedPipe
CreateNamedPipeA
QueryDosDeviceA
GetLogicalDriveStringsA
Process32NextW
Process32FirstW
GetExitCodeProcess
LoadLibraryA
ProcessIdToSessionId
FreeLibrary
ExpandEnvironmentStringsA
CreateFileA
GetCurrentThread
GetStartupInfoA
CreateProcessA
GetVersionExA
CreateEventA
FileTimeToLocalFileTime
FileTimeToSystemTime
Module32Next
Module32First
lstrcmpiA
GetLocalTime
Sleep
GetEnvironmentVariableA
listen
WSCUnInstallNameSpace
WSAEventSelect
bind
WSAEnumNetworkEvents
accept
socket
send
getservbyport
gethostbyaddr
shutdown
WSARecv
htonl
inet_ntoa
WSASetLastError
ntohs
WSACleanup
WSAStartup
inet_addr
ntohl
WSAGetLastError
gethostbyname
WSASocketA
WSAAddressToStringA
WSASend
WSAGetOverlappedResult
htons
WSCInstallNameSpace
WSCWriteNameSpaceOrder
WSAEnumNameSpaceProvidersA
connect
setsockopt
getsockname
recv
recvfrom
closesocket
getservbyname
WSAIoctl
sendto
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
PathFileExistsA
PathIsDirectoryA
PathRemoveFileSpecA
StrTrimA
GetWindowThreadProcessId
SendMessageTimeoutA
GetSystemMetrics
PostMessageA
FindWindowA
ExitWindowsEx
EnumWindows
GetParent
LookupAccountSidA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegEnumKeyExA
FreeSid
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAceEx
SetFileSecurityA
LookupAccountNameA
ConvertSidToStringSidA
AddAccessAllowedAce
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenSCManagerA
CloseServiceHandle
LookupPrivilegeNameA
OpenThreadToken
GetTokenInformation
EqualSid
SetTokenInformation
OpenProcessToken
DuplicateTokenEx
CreateProcessAsUserA
RegDeleteValueA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
RegOpenKeyExA
ShellExecuteExA
StrStrIA
StrCmpNIA
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??_8?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??_7?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?str@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??_7runtime_error@std@@6B@
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV01@@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PAD0PBD1@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@D@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
GetProcessImageFileNameA
GetModuleFileNameExA
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertFindChainInStore
CertGetIntendedKeyUsage
CertNameToStrA
CertOpenStore
CertAddCertificateContextToStore
CertGetNameStringA
CertFreeCertificateContext
CertCloseStore
CertFindCertificateInStore
CertOpenSystemStoreA
strstr
isspace
_snprintf
_wcsicmp
_access
_purecall
sprintf
__CxxFrameHandler
??2@YAPAXI@Z
_fileno
_initterm
wcslen
strncmp
_adjust_fdiv
__dllonexit
_onexit
strchr
wcscpy
strncpy
strncat
atoi
memmove
_strnicmp
memchr
??1type_info@@UAE@XZ
free
malloc
localtime
time
sscanf
??0exception@@QAE@ABV0@@Z
_stat
_strdup
swprintf
vswprintf
vsprintf
fopen
fseek
??0exception@@QAE@ABQBD@Z
fwrite
_read
fclose
strtol
strtoul
calloc
_CxxThrowException
strpbrk
_ftol
printf
_vsnprintf
ftell
fread
_getcwd
iscntrl
strrchr
strftime
SetTcpEntry
GetAdaptersInfo
GetTcpTable
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WinVerifyTrust
DsRoleGetPrimaryDomainInformation
InternetOpenA
HttpOpenRequestA
InternetQueryOptionA
InternetSetOptionA
HttpSendRequestA
InternetReadFile
InternetCloseHandle
InternetConnectA
Login
Logout
ModCleanUp
ModOnMsgRecv
ModStartUp
ModStatus
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ