LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Static task
static1
Behavioral task
behavioral1
Sample
799b8ad532661b65b3f3cc9ac7401e88f0cb60396abe79ef1346055c4f4151f3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
799b8ad532661b65b3f3cc9ac7401e88f0cb60396abe79ef1346055c4f4151f3.exe
Resource
win10v2004-20230915-en
Target
799b8ad532661b65b3f3cc9ac7401e88f0cb60396abe79ef1346055c4f4151f3
Size
643KB
MD5
d079f86cb40239dc44a8a334a54caa6e
SHA1
979b87265747f162e3f4109086c4e05407d5d182
SHA256
799b8ad532661b65b3f3cc9ac7401e88f0cb60396abe79ef1346055c4f4151f3
SHA512
3399fc92349aa1c18db9fc086c86cbc7faba3a89018f080990edd6ba82e0f274ec30424ae262d0f54ecd07e32bba5ccd86285cdea32b64c9b2ac79eaa59e3376
SSDEEP
12288:QfgKL44w3WI7jrZ+HJgfjeCFP8GZF9M2cg8s4z5lg5Ix+JKGrHySuHdmt:QNa3/wpgfjtPBMq8sZ5Ix+rQo
Checks for missing Authenticode signature.
resource |
---|
799b8ad532661b65b3f3cc9ac7401e88f0cb60396abe79ef1346055c4f4151f3 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE