LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Static task
static1
Behavioral task
behavioral1
Sample
e167483c97d45d57ecf3cc13a72fbf9f4eb8f3d25f90a4502767c92d26e22e3c.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
e167483c97d45d57ecf3cc13a72fbf9f4eb8f3d25f90a4502767c92d26e22e3c.exe
Resource
win10v2004-20231020-en
Target
e167483c97d45d57ecf3cc13a72fbf9f4eb8f3d25f90a4502767c92d26e22e3c
Size
4.5MB
MD5
eea93256aed36dad9db90fd86eaa9f14
SHA1
cca678b22fdd6ea6a65c17f2b998b05441cb8481
SHA256
e167483c97d45d57ecf3cc13a72fbf9f4eb8f3d25f90a4502767c92d26e22e3c
SHA512
32f8aaad890f8e977001f4bde3782b98b21f1612bc2d5c902297575cbacc5917676890246c29728fc874ed81a1952cf74e4d29a267ddb4114fdf1ed0c28ba011
SSDEEP
98304:1JZCcNAZFgz+cBl08m2vrsgYYTBwXQ3sx9nZuIFDkxXLbrnor:1JJuk+cBl0+rszYNwAIpZuCDkxXLbMr
Checks for missing Authenticode signature.
resource |
---|
e167483c97d45d57ecf3cc13a72fbf9f4eb8f3d25f90a4502767c92d26e22e3c |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE