LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Static task
static1
Behavioral task
behavioral1
Sample
6baec82ca1741824e48ba9c66bdd1c85fdc09e54af15d9bf42416e64a2cabd42.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6baec82ca1741824e48ba9c66bdd1c85fdc09e54af15d9bf42416e64a2cabd42.exe
Resource
win10v2004-20230915-en
Target
6baec82ca1741824e48ba9c66bdd1c85fdc09e54af15d9bf42416e64a2cabd42
Size
996KB
MD5
cce411a080fb8ba74ffefc0bcd255f87
SHA1
63e0afc4eee1878a83fef5be15a803ce632401b8
SHA256
6baec82ca1741824e48ba9c66bdd1c85fdc09e54af15d9bf42416e64a2cabd42
SHA512
8d7836e7dc37ab62f11821bab4dde40a27be131637f5919c8481c2ac3f83cf7093cc317e497444870a80e49a73f42ff753fccb80c9015e8701dbe7017bc41f1b
SSDEEP
24576:wlMjpGhAUHHXXVQE1ouWiDJGg3+JltROCQ6vTD0MaTGa3B5JDsr:IRVN2iDQnlPzQ6/BaLLR
Checks for missing Authenticode signature.
resource |
---|
6baec82ca1741824e48ba9c66bdd1c85fdc09e54af15d9bf42416e64a2cabd42 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE