Unrenounced
DllRegisterServer
Remancipate
Identicalness
Forevalue
DllUnregisterServer
Chthonic
Thoughted
DllGetClassObject
Amoralize
Overmature
DllCanUnloadNow
Handcraft
Ophioglossales
Static task
static1
Behavioral task
behavioral1
Sample
07a73fb70fa63ff53d091c68cb1e5728314ff7b479ca695050173faf3f8f5ea2.dll
Resource
win7-20240903-en
Target
f996f60603519fb183271788ec8dcdf12f8a6430cfd0cbc924a30353cabe2537.zip
Size
72KB
MD5
e35d09e6a523804d94247ec5046f0924
SHA1
5b3fde4fc5c02b5465617fee162a2b04d955c78f
SHA256
f996f60603519fb183271788ec8dcdf12f8a6430cfd0cbc924a30353cabe2537
SHA512
9041894343bba35301698ae3a81311a04e1d9575a2e35a717f904522d6715b52415a608af4d440a93d7618a9af8f5e99f37ff049c1f0ee86e1fdef4ddf2ac4cd
SSDEEP
1536:htiGyk+5B5T1QwnkxDNjIKfRd4m49P12JQ7r6SYWgHjYSPgDBgVfD:ht/lkB1teNjx6bP10bygHjZVV7
Checks for missing Authenticode signature.
resource |
---|
unpack001/07a73fb70fa63ff53d091c68cb1e5728314ff7b479ca695050173faf3f8f5ea2.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCreateKeyExA
RegDeleteKeyW
SetEntriesInAclW
GetLengthSid
RegisterEventSourceW
RegOpenKeyW
StartServiceW
CopySid
QueryServiceStatus
IsValidSid
RegSetValueExW
RegCloseKey
InitializeSecurityDescriptor
RegEnumKeyExW
OpenProcessToken
OpenSCManagerW
RegQueryInfoKeyW
RegOpenKeyExA
RegCreateKeyExW
AllocateAndInitializeSid
RegDeleteValueW
RegDeleteKeyA
RegOpenKeyExW
RegEnumValueA
RegQueryValueExW
GetTokenInformation
DeregisterEventSource
OpenServiceW
SetSecurityDescriptorDacl
ReportEventW
CloseServiceHandle
RegQueryInfoKeyA
RegSetValueExA
RegEnumValueW
FreeSid
VirtualProtect
FlushViewOfFile
GetSystemDefaultLCID
SwitchToThread
CreateDirectoryW
SetUnhandledExceptionFilter
TerminateProcess
WideCharToMultiByte
GetCurrentProcess
SetLastError
TryEnterCriticalSection
LocalFree
SetFilePointer
InterlockedDecrement
lstrcmpW
LoadLibraryW
GetProcAddress
CreateMutexW
FormatMessageW
ReleaseMutex
lstrcmpiW
DeleteFileW
FreeLibrary
CreateSemaphoreW
InterlockedIncrement
MoveFileExW
GetLastError
UnhandledExceptionFilter
WaitForSingleObject
CreateFileMappingW
lstrcpyW
DeleteCriticalSection
SetEvent
GetVersionExW
MapViewOfFile
OpenEventW
InterlockedCompareExchange
GetSystemTime
lstrcatW
UnmapViewOfFile
QueryPerformanceCounter
InitializeCriticalSection
GetCurrentThreadId
GetLocaleInfoW
GetCurrentProcessId
GetTickCount
EnterCriticalSection
ExpandEnvironmentStringsW
LeaveCriticalSection
GetVersionExA
CreateFileW
ResetEvent
lstrlenW
WriteFile
CloseHandle
CreateFileA
ReleaseSemaphore
lstrlenA
WaitForMultipleObjects
GetVersion
GetModuleFileNameW
CreateEventW
LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsW
memcpy
wcschr
memset
?terminate@@YAXXZ
_CxxThrowException
wcsrchr
_onexit
_initterm
mbstowcs
__CxxFrameHandler
wcslen
_wtol
realloc
wcsstr
__dllonexit
free
malloc
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
CoInitializeEx
CharNextW
LoadStringW
wsprintfW
Unrenounced
DllRegisterServer
Remancipate
Identicalness
Forevalue
DllUnregisterServer
Chthonic
Thoughted
DllGetClassObject
Amoralize
Overmature
DllCanUnloadNow
Handcraft
Ophioglossales
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ