__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
FinalDeleteFile.exe
Resource
win10-20230220-en
Target
FinalDeleteFile.exe
Size
55KB
MD5
66232dab30384e2d9d47935a451e6191
SHA1
40b55142673a7de345dcac8f5e0fd311c7b4b167
SHA256
d14e928aa48c104f42d8a36514f99ac04d17116e37118f1a04e7f048e138c570
SHA512
00a4488efd440784fd1da9b8e378c960232be3ece2473010d54d12630219c70ee899e9e5b3ca5e287265392e05fb2bcaf938bfb03804bebbf8f63f3ecf4be0d1
SSDEEP
1536:/d3zSKrhtk9KTzYE3gF9I/RA3Z5awL/fwG8G3DFBQ1:/FzD/5XwF9I5AzbNBE
Checks for missing Authenticode signature.
resource |
---|
FinalDeleteFile.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseHandle
CreateFileA
CreateFileMappingA
DeleteFileA
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
HeapAlloc
HeapFree
IsDebuggerPresent
LoadLibraryA
MapViewOfFile
OpenFileMappingA
RaiseException
RemoveDirectoryA
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WriteFile
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ