GetAppVersion
U4h06U47Y9nmt93y
Static task
static1
Behavioral task
behavioral1
Sample
838d366427125ad156fffa27af4e7838bf37b879bdc6b52fdbff6d2a18fa4423.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
838d366427125ad156fffa27af4e7838bf37b879bdc6b52fdbff6d2a18fa4423.dll
Resource
win10v2004-20241007-en
Target
838d366427125ad156fffa27af4e7838bf37b879bdc6b52fdbff6d2a18fa4423
Size
418KB
MD5
08e2935d456e45a2c059dd4e174a66c3
SHA1
368e4eb40c8f66526e0bb13c41fe2c6c80be7c85
SHA256
838d366427125ad156fffa27af4e7838bf37b879bdc6b52fdbff6d2a18fa4423
SHA512
6e142b3760ed6de53f0cac7e1aec6706f7e425de884bee3bb9a979fd372e1515f8592b54d83851f1db319e0239823f4c980d6ee8f9bcaef9788bc1d6350c692e
SSDEEP
6144:BK5IUvpKsF0V/HWR+CMKICEl7+yu6WNf67rU0/+yvmO+iC2efJMEZpqU96m+BX5P:ypKnzC2z6l96TBJWOFY+
Checks for missing Authenticode signature.
resource |
---|
838d366427125ad156fffa27af4e7838bf37b879bdc6b52fdbff6d2a18fa4423 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
CreateNamedPipeA
SetCurrentDirectoryA
GetCurrentDirectoryA
WriteFile
CreatePipe
WaitForSingleObject
GetTickCount
GetStartupInfoA
MultiByteToWideChar
ReadFile
GetCurrentProcess
GetCurrentThread
GetCurrentDirectoryW
TerminateProcess
ResumeThread
CreateProcessA
GetThreadContext
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
GetFullPathNameA
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetLogicalDrives
CopyFileA
MoveFileA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
PeekNamedPipe
OpenProcess
GetCurrentProcessId
CreateThread
LocalFree
VirtualAllocEx
VirtualProtect
CreateFileA
SetLastError
SetNamedPipeHandleState
WaitNamedPipeA
GetModuleFileNameA
WideCharToMultiByte
HeapAlloc
HeapFree
GetProcessHeap
InitializeProcThreadAttributeList
DeleteProcThreadAttributeList
SetErrorMode
UpdateProcThreadAttribute
DuplicateHandle
ProcessIdToSessionId
VirtualQuery
UnmapViewOfFile
ExitProcess
ExitThread
LocalAlloc
DisconnectNamedPipe
ConnectNamedPipe
GetLastError
CloseHandle
FlushFileBuffers
Sleep
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
WriteConsoleW
SetEndOfFile
HeapSize
CreateFileW
SetStdHandle
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
VirtualFree
OpenThread
VirtualAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetModuleHandleExW
QueryPerformanceFrequency
GetModuleFileNameW
GetStdHandle
GetFileType
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
DeleteFileW
CreateDirectoryW
RemoveDirectoryW
HeapReAlloc
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
FreeSid
InitializeSecurityDescriptor
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorDacl
__WSAFDIsSet
WSAGetLastError
ntohs
recv
accept
socket
bind
closesocket
ntohl
htons
htonl
listen
GetAppVersion
U4h06U47Y9nmt93y
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ