dat_LoadPassToken
dat_SavePassToken
Static task
static1
Behavioral task
behavioral1
Sample
SSO_dat.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
SSO_dat.dll
Resource
win10v2004-20240802-en
Target
SSO_dat.dll.zip
Size
5.7MB
MD5
60802474397ea5b651cf3418e944bb22
SHA1
0ef7165793d0df19dd2dc9ff5599db4c7c47eda9
SHA256
3947610a4d1995b1207d224336527c197410840c86c3215d5f84fea55738a2fd
SHA512
69243b4534a759cc3496f0ff9d6c9599de76261caf807e38a48bea18ea139d4f30bd57a19e1961c0a247760186de18a488e2a9c841cf5e27306f1c2f8050fabe
SSDEEP
98304:D+BKMvTT3dFZQg8mZQ+9p6jQBrf8a/iY4fEFMLhqK8qHMdf87N5OzABfzkn0o6u2:+KMvTjdd9hga/QEalpMaN5EABfwnh2
Checks for missing Authenticode signature.
resource |
---|
unpack001/SSO_dat.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameW
VirtualQuery
LocalAlloc
GetModuleFileNameW
LocalFree
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
AES_cbc_encrypt
?utils_LogW@@YA_NHPA_WZZ
PathFileExistsW
GetAdaptersAddresses
WTSQuerySessionInformationW
WTSSendMessageW
GetSystemMetrics
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
RegCreateKeyExW
CoCreateGuid
SysAllocString
dat_LoadPassToken
dat_SavePassToken
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ