__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
65ee483119e2be991bc019e5eb34fefae28aca6731facfe32c327761446a22b7.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
65ee483119e2be991bc019e5eb34fefae28aca6731facfe32c327761446a22b7.exe
Resource
win10v2004-20230703-en
Target
65ee483119e2be991bc019e5eb34fefae28aca6731facfe32c327761446a22b7
Size
273KB
MD5
211d2c8a8003e0ac147182b91c5c0e6f
SHA1
8301f4d567a6b7825ec2af03d591192e4378807d
SHA256
65ee483119e2be991bc019e5eb34fefae28aca6731facfe32c327761446a22b7
SHA512
7a272825d65cd6a3fd78508db73c9990e99722e2f1986abc684643c8342a8c8c35c9970d905fbbc1dad52088e3d08fd1cdc3ae6459d4f51e1592b1433436f1c8
SSDEEP
3072:8km3GuomyWSMTW3IrNetNH85zZ0REYwEtLhD6ySb+:8AuJE3IrY/4yE4
Checks for missing Authenticode signature.
resource |
---|
65ee483119e2be991bc019e5eb34fefae28aca6731facfe32c327761446a22b7 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
@HandleGlobalException$qr4xmsgpct2
@TApplication@$bctr$qpxcrp7TModulep14TAppDictionary
@TApplication@$bdtr$qv
@TApplication@CanClose$qv
@TApplication@Dispatch$qr24TEventHandler@TEventInfouil
@TApplication@Find$qr24TEventHandler@TEventInfopqr31%TResponseTableEntry$t7GENERIC%r24TEventHandler@TEventInfo$4bool
@TApplication@GetInitCmdLine$qv
@TApplication@IdleAction$ql
@TApplication@InitApplication$qv
@TApplication@InitCmdShow
@TApplication@InitHInstance
@TApplication@InitHPrevInstance
@TApplication@InitInstance$qv
@TApplication@MessageBox$qp6HWND__pxct2ui
@TApplication@MessageLoop$qv
@TApplication@PreProcessMenu$qp7HMENU__
@TApplication@ProcessAppMsg$qr6tagMSG
@TApplication@ProcessMsg$qr6tagMSG
@TApplication@Run$qv
@TApplication@SetMainWindow$qp12TFrameWindow
@TApplication@Start$qv
@TApplication@TermInstance$qi
@TControl@$bctr$qp7TWindowip7TModule
@TControl@$bctr$qp7TWindowipxciiiip7TModule
@TControl@$bdtr$qv
@TControl@CompareItem$qr20tagCOMPAREITEMSTRUCT
@TControl@DeleteItem$qr19tagDELETEITEMSTRUCT
@TControl@DrawItem$qr17tagDRAWITEMSTRUCT
@TControl@Find$qr24TEventHandler@TEventInfopqr31%TResponseTableEntry$t7GENERIC%r24TEventHandler@TEventInfo$4bool
@TControl@MeasureItem$qr20tagMEASUREITEMSTRUCT
@TControl@ODADrawEntire$qr17tagDRAWITEMSTRUCT
@TControl@ODAFocus$qr17tagDRAWITEMSTRUCT
@TControl@ODASelect$qr17tagDRAWITEMSTRUCT
@TDialog@$bctr$qp7TWindow6TResIdp7TModule
@TDialog@$bdtr$qv
@TDialog@CloseWindow$qi
@TDialog@Create$qv
@TDialog@Destroy$qi
@TDialog@DialogFunction$quiuil
@TDialog@DoCreate$qv
@TDialog@DoExecute$qv
@TDialog@EvInitDialog$qp6HWND__
@TDialog@Execute$qv
@TDialog@Find$qr24TEventHandler@TEventInfopqr31%TResponseTableEntry$t7GENERIC%r24TEventHandler@TEventInfo$4bool
@TDialog@GetClassNameA$qv
@TDialog@GetWindowClass$qr12tagWNDCLASSA
@TDialog@PreProcessMsg$qr6tagMSG
@TDialog@SetupWindow$qv
@TDib@$bctr$qpv11TAutoDelete
@TDib@$bdtr$qv
@TEventHandler@Find$qr24TEventHandler@TEventInfopqr31%TResponseTableEntry$t7GENERIC%r24TEventHandler@TEventInfo$4bool
@TFrameWindow@$bctr$qp7TWindowpxct14boolp7TModule
@TFrameWindow@$bdtr$qv
@TFrameWindow@AssignMenu$q6TResId
@TFrameWindow@CleanupWindow$qv
@TFrameWindow@EvCommand$quip6HWND__ui
@TFrameWindow@EvCommandEnable$qr15TCommandEnabler
@TFrameWindow@Find$qr24TEventHandler@TEventInfopqr31%TResponseTableEntry$t7GENERIC%r24TEventHandler@TEventInfo$4bool
@TFrameWindow@GetClientWindow$qv
@TFrameWindow@GetCommandTarget$qv
@TFrameWindow@HoldFocusHWnd$qp6HWND__t1
@TFrameWindow@IdleAction$ql
@TFrameWindow@PreProcessMsg$qr6tagMSG
@TFrameWindow@RemoveChild$qp7TWindow
@TFrameWindow@SetClientWindow$qp7TWindow
@TFrameWindow@SetDocTitle$qpxci
@TFrameWindow@SetIcon$qp7TModule6TResId
@TFrameWindow@SetIconSm$qp7TModule6TResId
@TFrameWindow@SetMenu$qp7HMENU__
@TFrameWindow@SetupWindow$qv
@TModule@$bctr$qpxcp11HINSTANCE__
@TModule@$bdtr$qv
@TModule@Error$qi
@TModule@Error$qr4xmsguiui
@TModule@LoadStringA$xquipci
@TStatic@$bctr$qp7TWindowiuip7TModule
@TWindow@$bctr$qv
@TWindow@$bdtr$qv
@TWindow@CanClose$qv
@TWindow@CleanupWindow$qv
@TWindow@CloseWindow$qi
@TWindow@Create$qv
@TWindow@DefWindowProcA$quiuil
@TWindow@Destroy$qi
@TWindow@Dispatch$qr24TEventHandler@TEventInfouil
@TWindow@DoExecute$qv
@TWindow@EvCommand$quip6HWND__ui
@TWindow@EvCommandEnable$qr15TCommandEnabler
@TWindow@EvNotify$quir7TNotify
@TWindow@Execute$qv
@TWindow@GetClassNameA$qv
@TWindow@GetWindowClass$qr12tagWNDCLASSA
@TWindow@HoldFocusHWnd$qp6HWND__t1
@TWindow@IdleAction$ql
@TWindow@Paint$qr3TDC4boolr5TRect
@TWindow@PerformCreate$qi
@TWindow@PreProcessMsg$qr6tagMSG
@TWindow@Register$qv
@TWindow@RemoveChild$qp7TWindow
@TWindow@SendMessageA$quiuil
@TWindow@SetDocTitle$qpxci
@TWindow@SetParent$qp7TWindow
@TWindow@SetupWindow$qv
@TWindow@ShowWindow$qi
@TWindow@Transfer$qpv18TTransferDirection
@TWindow@TransferData$q18TTransferDirection
@TWindow@WindowProc$quiuil
@TStreamableBase@$bdtr$qv
@TSystem@SupportsThreads$qv
@TThread@$bdtr$qv
@TThread@Terminate$qv
CloseHandle
CreateFileA
GetDiskFreeSpaceExA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
CreateWindowExA
DdeAccessData
DdeClientTransaction
DdeConnect
DdeCreateStringHandleA
DdeDisconnect
DdeFreeDataHandle
DdeFreeStringHandle
DdeInitializeA
DdeUnaccessData
DdeUninitialize
EnableWindow
MessageBoxExA
SetWindowTextA
wsprintfA
@$bdele$qpv
@$bdla$qpv
@$bnew$qui
@$bnwa$qui
@_CatchCleanup$qv
@_ReThrowException$quipuc
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
@filebuf@$bdtr$qv
@filebuf@openprot
@fstreambase@$bdtr$qv
@fstreambase@close$qv
@fstreambase@open$qpxcii
@ios@$bdtr$qv
@ofstream@$bctr$qpxcii
@ofstream@$bdtr$qv
@ostream@$bdtr$qv
@ostream@$blsh$qc
@streambuf@$bdtr$qv
@streambuf@sputn$qpxci
@string@$bctr$qpxc
@string@$bctr$qv
@string@$bdtr$qv
@string@assign$qrx6stringuiui
@string@compare$xqrx6string
@xmsg@$bdtr$qv
__ErrorExit
__ExceptionHandler
__Return_unwind
___debuggerDisableTerminateCallback
__argc
__argv
__exitargv
__flushall
__setargv
__startup
_abort
_fclose
_fnmerge
_fnsplit
_fopen
_fread
_fseek
_ftell
_memcpy
_memmove
_memset
_sprintf
_strcat
_strcpy
_strlen
_strncpy
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE