__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
Far.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Far.exe
Resource
win10v2004-20230915-en
Target
Far.exe
Size
820KB
MD5
2a1e05e1bb1d85ce36c5b7bf37c97816
SHA1
9c08182b4a918658bb979dc54cfce2d2532a9e8e
SHA256
cd6c35fad5689a1e1d43cadcaad3c4f6bf4296c2b17e575617b7dbac55581767
SHA512
df074b46b05c150029d637c309bf108c5a2752ed5190aa8f1410081ef850ff2b7780e23aa573b511278d7c81bf1ee130854235ae6553336abd553ed4e0813004
SSDEEP
12288:x3afpcJP0z//V2W8zXoyZQXsk0L4k76e6imrH8Rd6QMqikJ/Ghpf:AyJKnhckHre6imrE+fJ
Checks for missing Authenticode signature.
resource |
---|
Far.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetFileSecurityA
GetSecurityDescriptorOwner
GetUserNameA
LookupAccountSidA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegQueryValueExA
RegSetValueExA
SetFileSecurityA
AllocConsole
BackupWrite
CloseHandle
CompareFileTime
CompareStringA
CopyFileA
CreateDirectoryA
CreateFileA
CreateFileW
CreateMutexA
CreateProcessA
CreateThread
DefineDosDeviceA
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
EnterCriticalSection
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstFileA
FindNextFileA
FlushConsoleInputBuffer
FlushFileBuffers
FormatMessageA
FreeConsole
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCompressedFileSizeA
GetComputerNameA
GetConsoleCP
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemTimeAsFileTime
GetTempPathA
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
IsBadReadPtr
IsBadWritePtr
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalFileTimeToFileTime
MoveFileA
MoveFileExA
MultiByteToWideChar
OpenProcess
PeekConsoleInputA
QueryDosDeviceA
RaiseException
ReadConsoleA
ReadConsoleInputA
ReadConsoleOutputA
ReadConsoleOutputW
ReadFile
ReleaseMutex
RemoveDirectoryA
RtlUnwind
SearchPathA
SetConsoleCP
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleOutputCP
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetConsoleTitleA
SetConsoleWindowInfo
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFileApisToANSI
SetFileApisToOEM
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
SetThreadPriority
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleInputA
WriteConsoleOutputA
WriteConsoleOutputW
WriteFile
lstrcpyW
lstrlenA
lstrlenW
WNetCancelConnection2A
WNetGetUniversalNameA
WNetGetConnectionA
ClosePrinter
EndDocPrinter
EnumPrintersA
OpenPrinterA
StartDocPrinterA
WritePrinter
ExtractIconExA
FindExecutableA
SHFileOperationA
ShellExecuteA
ShellExecuteExA
CharLowerA
CharToOemA
CharToOemBuffA
CharUpperA
CloseClipboard
CopyIcon
EmptyClipboard
EnumClipboardFormats
EnumThreadWindows
EnumWindows
GetAsyncKeyState
GetClipboardData
GetKeyboardLayoutList
GetSystemMetrics
GetWindowLongA
GetWindowPlacement
GetWindowTextA
GetWindowThreadProcessId
IsCharAlphaA
IsCharAlphaNumericA
IsCharLowerA
IsCharUpperA
IsIconic
IsWindowVisible
MapVirtualKeyA
MapVirtualKeyExA
MessageBeep
MessageBoxA
OemToCharA
OemToCharBuffA
OpenClipboard
PostMessageA
RegisterClipboardFormatA
SendMessageA
SetClipboardData
SetForegroundWindow
ShowWindowAsync
SystemParametersInfoA
VkKeyScanA
VkKeyScanExA
WaitForInputIdle
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ