M0
M1
M10
M11
M12
M13
M14
M15
M2
M3
M4
M5
M6
M7
M8
M9
M_S0
M_S1
MaiDMFunc
MaiSfDummyEp
MmkeSureDirectoryPathExists
_MmmAssociateContext@8
Static task
static1
Behavioral task
behavioral1
Sample
3de037b560fb32d5852c8abd950105b922a96f44b27a417275156d2aeacaf6ceN.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3de037b560fb32d5852c8abd950105b922a96f44b27a417275156d2aeacaf6ceN.dll
Resource
win10v2004-20240802-en
Target
3de037b560fb32d5852c8abd950105b922a96f44b27a417275156d2aeacaf6ceN
Size
703KB
MD5
5a8e0f41bbd2607c9dc8bd0321bc2950
SHA1
72946079a7bbbd4c27356e15e0d387287017779f
SHA256
3de037b560fb32d5852c8abd950105b922a96f44b27a417275156d2aeacaf6ce
SHA512
80622224f411610a33ccc8a3185984a0bb0d162b7a12e93c86add81ca1bd3eb16e24e4195a436dc85ede660a0c30498a1fe6b93f8928501b3b37cefd1117a222
SSDEEP
6144:q9G/ZgzOK+E6rZ4qr+/Iml0eTn5APeFZ6lxz0hDlWHpOCYR:HhwOK+FZH+/I/cn5Ue3MxDXe
Checks for missing Authenticode signature.
resource |
---|
3de037b560fb32d5852c8abd950105b922a96f44b27a417275156d2aeacaf6ceN |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
htonl
WriteProcessMemory
GetModuleFileNameW
GetProcAddress
LoadLibraryA
LoadLibraryW
K32EnumProcessModules
K32GetModuleFileNameExW
VirtualProtect
ExitProcess
CreateFileA
CreateFileW
CreateProcessW
GetModuleHandleW
IsDebuggerPresent
CloseHandle
SetUnhandledExceptionFilter
Sleep
GetCurrentProcessId
GetCurrentThreadId
OpenThread
GetThreadContext
SetThreadContext
VirtualAlloc
OpenFileMappingW
ReadProcessMemory
UnmapViewOfFile
GetModuleHandleA
SetProcessDEPPolicy
GetPrivateProfileStringW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateProcessA
ReadFile
ConnectNamedPipe
DisconnectNamedPipe
CreateNamedPipeA
GetTempPathW
WaitForSingleObject
CreatePipe
SetHandleInformation
RemoveDirectoryW
FindNextFileW
FindFirstFileW
FindClose
CreateDirectoryW
VirtualProtectEx
VirtualAllocEx
ResumeThread
SuspendThread
HeapCreate
InitializeCriticalSection
MoveFileExW
MapViewOfFile
GetLastError
SetFilePointer
SetEndOfFile
GetFileSize
GetFileAttributesW
IsProcessorFeaturePresent
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineA
HeapAlloc
RaiseException
HeapDestroy
HeapFree
UnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
CreateSemaphoreW
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
GetStdHandle
GetFileType
GetProcessHeap
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
SetStdHandle
SetFilePointerEx
WriteConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
OutputDebugStringW
GetStringTypeW
HeapSize
VirtualFree
CreateThread
DeleteFileW
RegisterClassExA
MessageBoxA
RegisterClassA
wsprintfW
MessageBoxW
LoadStringA
CreateWindowExA
EnumFontFamiliesExW
RegOpenKeyExW
RegOpenKeyExA
MakeSureDirectoryPathExists
ImmAssociateContext
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
M0
M1
M10
M11
M12
M13
M14
M15
M2
M3
M4
M5
M6
M7
M8
M9
M_S0
M_S1
MaiDMFunc
MaiSfDummyEp
MmkeSureDirectoryPathExists
_MmmAssociateContext@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ