Doctor
Herevalue
Liemore
Morningthere
QuestionPoint
Ranexample
Tryconsonant
Weregentle
Static task
static1
Behavioral task
behavioral1
Sample
6402b33d729c8bb44881747a8f397f4aec408bf5e18b9af6fd86cdfa3f96323b.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
6402b33d729c8bb44881747a8f397f4aec408bf5e18b9af6fd86cdfa3f96323b.dll
Resource
win10v2004-20230621-en
Target
6402b33d729c8bb44881747a8f397f4aec408bf5e18b9af6fd86cdfa3f96323b
Size
235KB
MD5
8e37795097400f6a609525749d154cd0
SHA1
8e1502c2aa56e6a8c7c1d2c75f3946332a5bb8c0
SHA256
6402b33d729c8bb44881747a8f397f4aec408bf5e18b9af6fd86cdfa3f96323b
SHA512
c7453b8f50e557a5990ac3708931845eeb6dc2992cd907d5534733524f523226d8d013be6e09bb2b5210f6f5ad2303625f8998a5111d3b0925bb4228b6c9152a
SSDEEP
3072:CmmeuJ6jkhHVFpvq69D6UkqGFpMdsiOXdaygQ6YToG+rt:BmRJAkbFJqVvBpMZOcQ3Gt
Checks for missing Authenticode signature.
resource |
---|
6402b33d729c8bb44881747a8f397f4aec408bf5e18b9af6fd86cdfa3f96323b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetEnvironmentVariableW
GetFileSize
SetFilePointer
CreateProcessW
HeapAlloc
WaitForSingleObject
GetProcessHeap
WriteFile
LoadLibraryW
Sleep
CreateFileW
GetTempPathW
OpenMutexW
SetConsoleOutputCP
RemoveDirectoryW
DeviceIoControl
VirtualProtect
DeleteCriticalSection
GetCurrentThreadId
CloseHandle
SetFileAttributesW
GetCommandLineA
HeapFree
GetVersionExA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
HeapSize
LoadLibraryA
InitializeCriticalSection
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CoTaskMemFree
CoInitialize
CoUninitialize
CoTaskMemAlloc
Doctor
Herevalue
Liemore
Morningthere
QuestionPoint
Ranexample
Tryconsonant
Weregentle
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ