??0CdaStash@@QAE@XZ
??1CdaStash@@UAE@XZ
??_7CdaStash@@6B@
?Push@CdaStash@@QAEJIIJ@Z
?PushTick@CdaStash@@IAEJIIJ@Z
?PushTickList@CdaStash@@IAEJIIJ@Z
?Retrive@CdaStash@@QAEHAAI0JPAH@Z
Static task
static1
Behavioral task
behavioral1
Sample
06f78cf437e5f795803fa87fde3f47362590ce6462da03d689fd832439c05c7f.dll
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
06f78cf437e5f795803fa87fde3f47362590ce6462da03d689fd832439c05c7f.dll
Resource
win10v2004-20230703-en
Target
06f78cf437e5f795803fa87fde3f47362590ce6462da03d689fd832439c05c7f
Size
40KB
MD5
d8b009d36678f22e20cf4902912ce6d4
SHA1
cc8ffe641a88bebf156e854f0dd4ea6e49cb314a
SHA256
06f78cf437e5f795803fa87fde3f47362590ce6462da03d689fd832439c05c7f
SHA512
d495a1155493019274784815c6610e3924bbacd9a81c46cce361c1719f63eb9f87625eab4a94825625b4a8baa83df3afa35bf26b9324a21c70c33ec4e66c78aa
SSDEEP
192:Ft2E9LyaFyxKbNkv2L7hITiYbV6oI+KmdrcaP+gMuehI:FtT9Wa2w19YbVRIIrzmg0I
Checks for missing Authenticode signature.
resource |
---|
06f78cf437e5f795803fa87fde3f47362590ce6462da03d689fd832439c05c7f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord1168
ord1253
ord342
ord823
ord1182
ord825
ord699
ord772
ord397
ord500
ord800
ord912
ord538
ord5606
ord5860
ord4188
ord3663
ord2393
ord5440
ord6383
ord5450
ord6394
ord6142
__CxxFrameHandler
_purecall
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
??0CdaStash@@QAE@XZ
??1CdaStash@@UAE@XZ
??_7CdaStash@@6B@
?Push@CdaStash@@QAEJIIJ@Z
?PushTick@CdaStash@@IAEJIIJ@Z
?PushTickList@CdaStash@@IAEJIIJ@Z
?Retrive@CdaStash@@QAEHAAI0JPAH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ