@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
anctl.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
anctl.exe
Resource
win10v2004-20230220-en
Target
anctl.exe
Size
67KB
MD5
9673b9c946bd447f45f22aafb95965ca
SHA1
20cede21892a8efd9dc739a9b8cb9f15783a2e66
SHA256
37b25e4f3652c99bf6d17bc222200cb9823f0ebc8b625d377472ad1ba7441f1c
SHA512
e674fe93f0e31b0f4520ef5f2000dfee10263f26fbe9c2876fbb0e217899782d420307cfebb316418fd011c815781475254824549ab7ddbf4cee7f17718f35d6
SSDEEP
1536:Wc1kJismnkf/sUVr00HTWyIoGMGddTPf:Wc1cfsUVr00Ql
Checks for missing Authenticode signature.
resource |
---|
anctl.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CloseServiceHandle
ControlService
DeleteService
OpenSCManagerA
OpenServiceA
QueryServiceStatus
RegDeleteKeyA
RegOpenKeyExA
CloseHandle
CreateFileA
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
lstrcmpiA
DestroyWindow
EnumThreadWindows
FindWindowA
GetWindowTextA
MessageBoxA
wsprintfA
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ