IternalJob
SetPath
Static task
static1
Behavioral task
behavioral1
Sample
6233c74d44b7206f00d9c86ccac29577e3ea5f4b8a4a8cf8faf64d159d0e10bd.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6233c74d44b7206f00d9c86ccac29577e3ea5f4b8a4a8cf8faf64d159d0e10bd.dll
Resource
win10v2004-20250129-en
Target
6233c74d44b7206f00d9c86ccac29577e3ea5f4b8a4a8cf8faf64d159d0e10bd
Size
2.7MB
MD5
4d9d368872e1d819968c6aba4938fd61
SHA1
dc22a03c0bca99fef3a8e9e801fe9e43cda240be
SHA256
6233c74d44b7206f00d9c86ccac29577e3ea5f4b8a4a8cf8faf64d159d0e10bd
SHA512
ba176147280cfa54670c49befcc7f49ce50a4a41214718e647a1fe19ae4b61fce1fecd7785bb284a20f14523ff8d91a03e72a36f0e4703b5c284cc3f85070129
SSDEEP
49152:ydhvtC1w3DBJXHUlz6b13GtTfOL7vPsBjLAgbIYETghETcltJf:ydysBVHWz6b13GtTfOL7vPsBjLAgbIYl
Checks for missing Authenticode signature.
resource |
---|
6233c74d44b7206f00d9c86ccac29577e3ea5f4b8a4a8cf8faf64d159d0e10bd |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
VerSetConditionMask
DeleteFileA
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetCurrentThreadId
SetThreadContext
VirtualProtect
GetModuleFileNameA
DeleteFiber
GetProcAddress
LocalShrink
SetCommBreak
lstrcmpiA
lstrcpynA
LoadLibraryA
LoadLibraryW
FindResourceA
WideCharToMultiByte
ReleaseActCtx
GetWindowsDirectoryW
GetSystemTimes
IsSystemResumeAutomatic
GetCPInfo
TerminateJobObject
GetModuleHandleExA
QueryIdleProcessorCycleTime
GetFocus
CheckRadioButton
MoveWindow
CharUpperA
SetWindowTextA
LoadBitmapW
IsWinEventHookInstalled
DlgDirSelectComboBoxExA
SetWindowsHookExA
EnumPropsExA
SetUserObjectSecurity
VkKeyScanExW
SetMapMode
GetTextMetricsW
GetTextExtentPoint32A
IntersectClipRect
ResetDCW
D3DKMTReleaseKeyedMutex
StartDocA
ord171
ord167
ExtractAssociatedIconW
ord2
ObjectStublessClient14
ObjectStublessClient5
ObjectStublessClient6
CoGetMalloc
CoGetCallerTID
OleInitializeWOW
CoUninitialize
OleConvertIStorageToOLESTREAMEx
CoFileTimeToDosDateTime
CoGetInterceptorFromTypeInfo
OleCreateFromData
NdrProxyForwardingFunction10
IternalJob
SetPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ