CheckSignerInfo
ExportFunc01
ExportFunc02
IsNetConnect
Static task
static1
Behavioral task
behavioral1
Sample
6baedf52120ee87684255e49892d814f81a00afe25d38505e6611e91d7458950.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6baedf52120ee87684255e49892d814f81a00afe25d38505e6611e91d7458950.exe
Resource
win10v2004-20230915-en
Target
6baedf52120ee87684255e49892d814f81a00afe25d38505e6611e91d7458950
Size
2.5MB
MD5
9960d0faf45cbc501d1e5b538dd3023b
SHA1
2d2533d887cbd0a35453b68bec7bb483286919bb
SHA256
6baedf52120ee87684255e49892d814f81a00afe25d38505e6611e91d7458950
SHA512
e2549a056224cb3bd475aa809dfa4f6ae549dff9c5663e5cabc89acc250fa968899a20ba1973f8aa40c1b2b074ed1dc506a907dfa92f22ade3e2da992947e2e7
SSDEEP
49152:kdobxU7osVbhQqTuwTYn6bPZz5BQyo7VBh+O+wTpv/Uolbb+7EtVb3:ocU7PVlQqTtECQ57VX+CUo
Checks for missing Authenticode signature.
resource |
---|
6baedf52120ee87684255e49892d814f81a00afe25d38505e6611e91d7458950 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CryptMsgClose
CryptDecodeObject
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptQueryObject
CertFreeCertificateContext
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sleep
GetCurrentProcess
ExpandEnvironmentStringsW
GetVersion
GetDriveTypeW
GetCurrentThread
GetVolumeInformationW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
InterlockedCompareExchange
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
GetThreadContext
SetThreadContext
SuspendThread
ResumeThread
SetLastError
WaitForMultipleObjects
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
ReadFile
SetEndOfFile
GetFileSize
GetComputerNameW
GetTickCount
GetProcessHeap
SetEvent
GetACP
GlobalMemoryStatusEx
InterlockedExchange
InterlockedExchangeAdd
lstrlenW
GetModuleHandleW
GetVersionExW
GetFileAttributesW
HeapAlloc
GlobalFree
GlobalAlloc
OpenProcess
HeapFree
DeleteFileW
lstrcpyW
LocalFree
lstrcmpA
LocalAlloc
CreateFileMappingW
FileTimeToLocalFileTime
FileTimeToSystemTime
EnumResourceNamesW
SizeofResource
GetUserDefaultLangID
WriteConsoleW
GetLocalTime
GetCurrentThreadId
CreateFileW
SetFilePointer
GetModuleFileNameW
WriteFile
FreeLibrary
GetProcAddress
GetWindowsDirectoryW
CreateDirectoryW
LoadLibraryW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCurrentProcessId
DeleteCriticalSection
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
MoveFileExW
CloseHandle
GetLastError
HeapSize
SetStdHandle
OutputDebugStringA
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FlushFileBuffers
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
HeapReAlloc
SetConsoleCtrlHandler
GetModuleFileNameA
ExitProcess
CreateMutexW
WaitForSingleObject
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetFileType
GetStdHandle
WaitNamedPipeW
TransactNamedPipe
DuplicateHandle
SetNamedPipeHandleState
VirtualQueryEx
OpenThread
InterlockedIncrement
CreateSemaphoreW
CreateThread
TerminateThread
GetProcessId
InterlockedDecrement
ReleaseSemaphore
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileSectionW
GetSystemDirectoryW
FindFirstFileW
FindNextFileW
DeviceIoControl
FindClose
CreateProcessW
QueryInformationJobObject
WriteProcessMemory
AssignProcessToJobObject
CreateJobObjectW
IsProcessInJob
GetModuleHandleA
VirtualAllocEx
CreateRemoteThread
TerminateJobObject
GetExitCodeProcess
GetLongPathNameW
GetShortPathNameW
GetFileAttributesExW
SearchPathW
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
LockResource
GetSystemInfo
LoadResource
FindResourceW
lstrcmpiW
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
ReleaseMutex
OpenMutexW
QueryDosDeviceW
LoadLibraryExW
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
OpenEventW
CreateEventW
ResetEvent
SetFileTime
GetFileTime
GetComputerNameExW
LocalFileTimeToFileTime
SystemTimeToFileTime
GetSystemTime
DosDateTimeToFileTime
FileTimeToDosDateTime
TerminateProcess
GetFullPathNameW
RemoveDirectoryW
GetTempPathW
SetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
CopyFileW
GetTempFileNameW
MoveFileW
lstrcatW
GetFileSizeEx
FormatMessageW
GetStringTypeW
EncodePointer
GetCPInfo
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
OutputDebugStringW
RtlCaptureContext
GetDesktopWindow
GetParent
SetFocus
GetClassNameW
GetForegroundWindow
AttachThreadInput
WindowFromPoint
GetShellWindow
GetSystemMetrics
SetWindowPos
GetFocus
CreateIconFromResourceEx
PrivateExtractIconsW
GetWindowRect
DestroyIcon
LookupIconIdFromDirectoryEx
LoadImageW
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
GetWindowTextLengthW
GetDC
IsWindowVisible
EnumChildWindows
IsWindow
EnumDesktopWindows
GetActiveWindow
GetWindowThreadProcessId
UnregisterClassW
FindWindowW
SendMessageW
GetIconInfo
OpenDesktopW
CloseDesktop
GetWindowTextW
ReleaseDC
LookupPrivilegeValueW
IsValidSid
GetTokenInformation
GetLengthSid
ConvertSidToStringSidW
FreeSid
OpenProcessToken
AllocateAndInitializeSid
EqualSid
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetEntriesInAclW
RegQueryValueExW
RegOpenKeyExW
SystemFunction036
CheckTokenMembership
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegEnumValueW
SetNamedSecurityInfoW
AdjustTokenPrivileges
SHGetFileInfoW
SHFileOperationW
SHGetMalloc
ExtractIconExW
SHGetDesktopFolder
SHGetFolderPathW
ShellExecuteW
SHChangeNotify
SHGetPathFromIDListW
ShellExecuteExW
SHGetSpecialFolderLocation
DuplicateIcon
SHGetSpecialFolderPathW
ord727
OleInitialize
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
OleUninitialize
CreateStreamOnHGlobal
SysFreeString
VariantClear
SysAllocString
SHDeleteKeyW
PathRemoveFileSpecW
PathFileExistsW
InternetGetConnectedState
InternetCheckConnectionW
GetAdaptersInfo
ImageEnumerateCertificates
ImageRemoveCertificate
GdipGetImageHeight
GdipGetImageEncoders
GdipLoadImageFromFileICM
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromStream
GdipLoadImageFromFile
GdiplusStartup
GdipGetImageWidth
GdipDisposeImage
GdipFree
GdipGetImageRawFormat
GdipGetImageEncodersSize
GdipCreateHICONFromBitmap
GdiplusShutdown
GdipCreateBitmapFromStreamICM
GdipSaveImageToFile
DeleteDC
DeleteObject
CreateCompatibleDC
CreateFontIndirectW
GetObjectW
GetStockObject
GetTextExtentPointW
GetTextExtentExPointW
SelectObject
GetDIBits
CheckSignerInfo
ExportFunc01
ExportFunc02
IsNetConnect
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE