LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Static task
static1
Behavioral task
behavioral1
Sample
aebb736c549542c0cd0b07ee2b4d04cbd92dd46e0352b5b4e743ff827551ddfb.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
aebb736c549542c0cd0b07ee2b4d04cbd92dd46e0352b5b4e743ff827551ddfb.exe
Resource
win10v2004-20230831-en
Target
aebb736c549542c0cd0b07ee2b4d04cbd92dd46e0352b5b4e743ff827551ddfb
Size
4.4MB
MD5
b9f6681ff7a4e73fe171f71632f9568a
SHA1
0b1a255350e36cb941c1b8606a1ede80e105c69f
SHA256
aebb736c549542c0cd0b07ee2b4d04cbd92dd46e0352b5b4e743ff827551ddfb
SHA512
5a4d72322694c6b9275d0a8130080550939860dcb8375d6e22099d544709bffc1d721c535cc5f7995263ce210d675272535ff534195cd9d4178a45dc82ab1321
SSDEEP
98304:XHtpPp3qKpsRf1KczfWMNGmKe6gGzak9io1k85oFZBE0jmrakLXOkVFwJ1E2mEg1:XNpPpqKOoANGmKhnzF9v1HoFhkLZrx28
Checks for missing Authenticode signature.
resource |
---|
aebb736c549542c0cd0b07ee2b4d04cbd92dd46e0352b5b4e743ff827551ddfb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE