BlockMove
MemManager
MirrorMove
MirrorMove128
RefreshStable
SimpleTest
Static task
static1
Behavioral task
behavioral1
Sample
TestMem5v0.1/TM5.exe
Resource
win10v2004-20230915-en
Target
testmem5.zip
Size
30KB
MD5
147b04d5b13f40f8274eceaf2026e17e
SHA1
7f17ce12a1fe3d2f5d1db902294f3c54d292d0dc
SHA256
94d7e7fd5ec0553453fdbf99da63b695a04dc70b76c3e58b38bed107dfc79090
SHA512
dba3d49dbacd1825b29f95c00c523b6afad5da92d5705b1a869a483429f60264909c2e7884d54a8f84a00019089cdee5e5737207889d9b04cb26021f392751d0
SSDEEP
768:wufIY+Qg32jilRTzK3tzkIA2/6guka80I33mN6eUZ:tgCilpW3ZY2/Gr+UY
Checks for missing Authenticode signature.
resource |
---|
unpack001/TestMem5v0.1/TM5.exe |
unpack001/TestMem5v0.1/bin/MT0.dll |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetPriorityClass
SetThreadPriority
Sleep
TerminateProcess
TerminateThread
VirtualAlloc
ReadFile
WriteFile
WritePrivateProfileStringA
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
QueryPerformanceFrequency
QueryPerformanceCounter
SetFilePointer
MapViewOfFile
LoadLibraryA
HeapFree
HeapAlloc
GlobalMemoryStatusEx
GlobalFree
GlobalAlloc
GetVersion
GetUserDefaultLangID
GetTickCount
GetSystemInfo
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetPrivateProfileStringA
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
RtlZeroMemory
MultiByteToWideChar
GetLastError
GetFileSize
GetCurrentThread
GetCurrentProcess
GetCompressedFileSizeA
GetCommandLineA
ExitThread
ExitProcess
CreateThread
CreateProcessA
CreateFileMappingA
CreateFileA
VirtualFree
CloseHandle
wsprintfA
SendMessageA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetTimer
SetForegroundWindow
SetDlgItemTextA
GetWindowPlacement
MessageBoxA
LoadIconA
GetWindowRect
GetWindowLongA
GetSysColor
GetDlgItem
GetDlgCtrlID
DialogBoxParamA
InitCommonControls
InitCommonControlsEx
SetBkMode
CreateSolidBrush
CreateFontA
SetTextColor
ShellExecuteA
RegOpenKeyExA
LsaOpenPolicy
RegQueryValueExA
timeGetTime
GetSaveFileNameA
GetOpenFileNameA
ZwQuerySystemInformation
CoInitialize
CoUninitialize
CoCreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapAlloc
HeapFree
MapUserPhysicalPages
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessWorkingSetSize
SetProcessWorkingSetSize
VirtualAlloc
VirtualFree
VirtualLock
VirtualUnlock
WriteFile
GetProcessHeap
GetLastError
GetCurrentProcess
FreeUserPhysicalPages
CreateFileA
CloseHandle
RtlZeroMemory
AllocateUserPhysicalPages
MessageBoxA
wsprintfA
LsaClose
LookupPrivilegeValueA
GetTokenInformation
AdjustTokenPrivileges
LsaOpenPolicy
OpenProcessToken
LsaAddAccountRights
timeGetTime
BlockMove
MemManager
MirrorMove
MirrorMove128
RefreshStable
SimpleTest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ