Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
Static task
static1
Behavioral task
behavioral1
Sample
8515af8c842e048d757dab7a1ce92320_vabushky_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8515af8c842e048d757dab7a1ce92320_vabushky_JC.exe
Resource
win10v2004-20230703-en
Target
8515af8c842e048d757dab7a1ce92320_vabushky_JC.exe
Size
54KB
MD5
8515af8c842e048d757dab7a1ce92320
SHA1
0984d99fa16fc4892f937f1e6a8967a77c85e74c
SHA256
ad8602f5d4ac2d3a3ff00f1b6a40f5ede0609f2d479ca519cb3c1fad4e6a597e
SHA512
a1ea249a7c69bacc6dcd66cdec573af06512997cb20ece6d0da995bc5b4dafe2fe413b707419bd2e0e4c0712be31ec773a7c7ce36f04cd610aa54973c7b89931
SSDEEP
768:iGCwi3kNYsGVnyM69cgFeyat3zBGwvnZXUk+EjeOScG3u/fClJM43FrGIgaEPC:iGSo36pxZUk+OeOSc/Mn3FrGI1
Checks for missing Authenticode signature.
resource |
---|
8515af8c842e048d757dab7a1ce92320_vabushky_JC.exe |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
strcat
StrStrIA
InternetOpenA
CheckSumMappedFile
VerQueryValueA
GetDC
EndPath
RegOpenKeyA
Inject64End
Inject64Normal
Inject64Start
UacInject64End
UacInject64Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE