load
run
runman
Static task
static1
Behavioral task
behavioral1
Sample
c7eedbcfa369d3dfe455484210eea1f0N.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c7eedbcfa369d3dfe455484210eea1f0N.dll
Resource
win10v2004-20240802-en
Target
c7eedbcfa369d3dfe455484210eea1f0N.exe
Size
130KB
MD5
c7eedbcfa369d3dfe455484210eea1f0
SHA1
49e74b5b85df8a56141e91b5d284714f276b56f9
SHA256
5e91d5346aef0f9c6a40d77773647af245278bdf66a89428613439a3a5eec4e0
SHA512
5135f45f826f02c824a753ff64d85f22d3684b12ddd44000410675eaf425134493ccf40b7693d7ad8206e70aca07d358938e95db24d9ebf1ba821487170cc8a8
SSDEEP
3072:8i/eo1w5RLnSFk6STZy/7sP1k56PNunCThfCOzIUMk0Z9DcO:8i/xw5BnhhTZ+oP1k56PNuCwHzSO
Checks for missing Authenticode signature.
resource |
---|
c7eedbcfa369d3dfe455484210eea1f0N.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
HeapCreate
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetEvent
Sleep
CreateEventA
GetLastError
CloseHandle
GetCurrentThreadId
SwitchToThread
SetLastError
WideCharToMultiByte
lstrlenW
ResetEvent
CreateEventW
LeaveCriticalSection
TryEnterCriticalSection
SetWaitableTimer
CreateWaitableTimerW
GetThreadContext
SetThreadContext
OpenProcess
GetExitCodeProcess
CreateProcessA
GetSystemDirectoryA
VirtualAllocEx
WriteProcessMemory
ResumeThread
CreateMutexW
CreateThread
CreateFileW
HeapDestroy
InitializeCriticalSectionAndSpinCount
HeapFree
HeapAlloc
VirtualAlloc
CancelIo
VirtualFree
LCMapStringW
WriteConsoleW
SetStdHandle
GetStringTypeW
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
GetSystemTimeAsFileTime
FlushFileBuffers
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
HeapReAlloc
HeapSize
GetProcessHeap
ExitThread
DecodePointer
EncodePointer
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FlsGetValue
FlsFree
FlsAlloc
RtlUnwindEx
SetHandleCount
GetFileType
PeekMessageW
TranslateMessage
MsgWaitForMultipleObjects
DispatchMessageW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW
RegSetValueExW
WSACreateEvent
WSASetLastError
WSAResetEvent
WSAWaitForMultipleEvents
WSAIoctl
connect
WSAStartup
WSAEventSelect
htons
setsockopt
WSACleanup
recv
socket
closesocket
gethostbyname
send
WSAEnumNetworkEvents
WSAGetLastError
WSACloseEvent
select
shutdown
timeGetTime
load
run
runman
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ