ESFreeMem
ESGetVersion
ESInitialize
ESTerminate
doRequest
getMachineId
getOsVersion
validateMachineId
Static task
static1
Target
MoBar.7z
Size
5.1MB
MD5
a5d9714435c168e5e4dfa6d985e1054e
SHA1
7c865a55bd34057885a1409a0625dc31110b542f
SHA256
ffacb21f14ae187ddc45146ca78b6d24613827c0baa7b277224e07980df18097
SHA512
47438de57ea9a16c44312c96fbfc6bc02e6250629cae7e314c7a18ba5b7c2c4e6bae90d3aee829fe7a0d97cd05edfa2fc20d88c1b4cfec58d5acc35ab128fe39
SSDEEP
98304:3gVlo7NcQjrVJgY423zKQmIjByp1swY2kd5QBADGtYKb+OdEUnA:QAv5Jh5KfwByp1NY2IQqDGi2TdVA
Checks for missing Authenticode signature.
resource |
---|
unpack001/MoBar/assets/bin/reqlib.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetAdaptersInfo
UnregisterWait
SetEndOfFile
SignalObjectAndWait
GetModuleHandleW
Sleep
GetLastError
GetProcAddress
GetVersionExA
GetThreadPriority
CreateFileW
WriteConsoleW
SetStdHandle
ReadConsoleW
LoadLibraryW
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
WideCharToMultiByte
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeW
HeapFree
HeapAlloc
GetCommandLineA
GetCPInfo
IsProcessorFeaturePresent
CreateThread
ExitThread
LoadLibraryExW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsGetValue
CreateTimerQueueTimer
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
CreateTimerQueue
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
GetStdHandle
GetFileType
GetProcessHeap
ExitProcess
GetModuleHandleExW
AreFileApisANSI
WriteFile
GetModuleFileNameW
ReadFile
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
SetFilePointer
HeapReAlloc
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
OutputDebugStringW
SwitchToThread
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
SetEvent
CreateEventW
SetThreadPriority
GetTickCount
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
RpcStringFreeA
UuidCreate
UuidToStringA
InternetReadFile
InternetSetOptionA
HttpQueryInfoA
HttpOpenRequestA
InternetSetCookieA
HttpSendRequestA
InternetOpenA
InternetGetCookieExA
InternetCloseHandle
InternetConnectA
ESFreeMem
ESGetVersion
ESInitialize
ESTerminate
doRequest
getMachineId
getOsVersion
validateMachineId
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ