LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Static task
static1
Behavioral task
behavioral1
Sample
a7d6dd995e7bd4ac4a5bfebd0083bb9a7fdecc44e7a54480a15202213137891e.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a7d6dd995e7bd4ac4a5bfebd0083bb9a7fdecc44e7a54480a15202213137891e.exe
Resource
win10v2004-20231023-en
Target
a7d6dd995e7bd4ac4a5bfebd0083bb9a7fdecc44e7a54480a15202213137891e
Size
1.4MB
MD5
b961a783a8a54dd5baa33dc15f421ea5
SHA1
ff6777fe1070bf60a65bab158f62d364261fc4ed
SHA256
a7d6dd995e7bd4ac4a5bfebd0083bb9a7fdecc44e7a54480a15202213137891e
SHA512
597d339fd9b6d2dbf5e2b22def8400b1a28d093f23ab16c55abec976298db5b22ad6a214e863b2d456a9903f75b27dd66b355c6d9886dde13877b9ca536e4ba6
SSDEEP
24576:DqVQtawuCNPCpdrH2sfSDsVnMJT94TOO7FFKjsb3/DbJPdFpeID:0g5uCNPCbH2wnMJx4D7QW3/fJPl
Checks for missing Authenticode signature.
resource |
---|
a7d6dd995e7bd4ac4a5bfebd0083bb9a7fdecc44e7a54480a15202213137891e |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE