JDuCS622tuL6
MkcDIl34k3Si
PcYge9j
eOXScagadNKe
Static task
static1
Behavioral task
behavioral1
Sample
8a196bc5cba13246cbd2547ae0504232ef3078df8de02e630e0a1448cabdf372.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
8a196bc5cba13246cbd2547ae0504232ef3078df8de02e630e0a1448cabdf372.dll
Resource
win10v2004-20231023-en
Target
8a196bc5cba13246cbd2547ae0504232ef3078df8de02e630e0a1448cabdf372
Size
874KB
MD5
8fd02b002ba4313b69215ea2a4fa9da0
SHA1
308ed2b2c400ee8997370b8563bb60dd3fdaca9c
SHA256
061c2c8ab5623d1018c1356c64f30aaa79a6ca984f15a506f21e17b92d9e047f
SHA512
54a8daa6f91675ecdab1fc292fb75ec07c88056bcd07a7f614aa1195d8dc5b1dcc0a9b0f3847e11330d9d9e1670bdfe648c3af7ac46e2af34c9942439be06d59
SSDEEP
24576:WF88D0aKyY2KHq/DQwbBB5q1EVDu4K6HCr5:NMUADQwdBoou4Kcw
Checks for missing Authenticode signature.
resource |
---|
unpack001/8a196bc5cba13246cbd2547ae0504232ef3078df8de02e630e0a1448cabdf372 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetProcessHeap
CreateFileA
CloseHandle
GetLastError
HeapWalk
CreateFiber
SwitchToFiber
CreateActCtxA
ActivateActCtx
DeactivateActCtx
OpenThread
GetFileAttributesA
FindFirstFileA
FindNextFileA
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcessId
GetFileInformationByHandle
CreateFileMappingA
VirtualAlloc
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetLastError
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
CompareStringW
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
ExitProcess
GetModuleHandleExW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapReAlloc
RtlUnwindEx
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
JDuCS622tuL6
MkcDIl34k3Si
PcYge9j
eOXScagadNKe
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ