KFoVIxckwgVV
setPath
Behavioral task
behavioral1
Sample
outout.dll
Resource
win7-20230831-en
Target
outout.bin
Size
1.4MB
MD5
e7ee02d4c897e87048232a891e2a97f8
SHA1
36ee65e12cc044d99fd0654d8f4792910b1a3046
SHA256
39e300a5b4278a3ff5fe48c7fa4bd248779b93bbb6ade55e38b22de5f9d64c3c
SHA512
8b1ecdab172e44c61c9b86785da76297f0c3c7eb68755149e9ca14a64ef39c581ee05e39c2fc98861260eaef848b2e542b59f34ef6844d3ef27ef5f758351fa1
SSDEEP
24576:Eo10e/WhcerhA1HqikX3CUDA49JOOx2nP6c5P8hAlm3wKjHsElse:LUxhAxq7TDA4j7q55EhcGjHt
Checks for missing Authenticode signature.
resource |
---|
outout.bin |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
StrToIntA
StrChrA
PathFindFileNameW
VirtualFree
lstrcpyA
lstrcmpA
lstrcatA
GetProcAddress
FreeLibrary
VirtualAlloc
GetCurrentThread
GetCurrentThreadId
CloseHandle
GetModuleHandleW
VirtualProtectEx
LoadLibraryA
GetModuleHandleA
VirtualQuery
lstrlenA
VirtualQueryEx
GetCurrentProcess
UnmapViewOfFile
KFoVIxckwgVV
setPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ