RC4
ThreadFunction
format
initialization
querytable
Static task
static1
Behavioral task
behavioral1
Sample
9278aea6561d5cb76147702e104ab805b54303f6fe1ce598484efc3e443e988d.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9278aea6561d5cb76147702e104ab805b54303f6fe1ce598484efc3e443e988d.dll
Resource
win10v2004-20240802-en
Target
9278aea6561d5cb76147702e104ab805b54303f6fe1ce598484efc3e443e988d
Size
17KB
MD5
d4a2ed4f54b532c45a751f4c6cc7c238
SHA1
87e60643b97cc6af95429ce9fb09a66260478da4
SHA256
9278aea6561d5cb76147702e104ab805b54303f6fe1ce598484efc3e443e988d
SHA512
7c02659c2ac8d959be59271fda7b328d3e2877c1beb27ac6cbff458aef773a4cee3c071bdc6a6fc2ee5742ec22195c6cafc04b2056d061a0ebcc9301647b021d
SSDEEP
192:hAJlQmO0zw24dB36AkSvvwzWlKo8KhIPuK3BX7SO6TVKSMUZiTTTTTTTTTTTTTTV:hAJlu1F/vvwa4qkuKZHUZskJEZT
Checks for missing Authenticode signature.
resource |
---|
9278aea6561d5cb76147702e104ab805b54303f6fe1ce598484efc3e443e988d |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualAlloc
VirtualProtect
VirtualQuery
__p__environ
__p__wenviron
_set_new_mode
calloc
free
malloc
__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite
puts
strlen
strncmp
strncpy
__daylight
__timezone
__tzname
_tzset
RC4
ThreadFunction
format
initialization
querytable
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ