@GetFirstVice@8
@SetViceVariants@12
Static task
static1
Behavioral task
behavioral1
Sample
427e84d5018f067ef7ae15fece603ddc.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
427e84d5018f067ef7ae15fece603ddc.exe
Resource
win10v2004-20231201-en
Target
427e84d5018f067ef7ae15fece603ddc
Size
472KB
MD5
427e84d5018f067ef7ae15fece603ddc
SHA1
7e629ad64d9b26bedc849597dc40bb0f238d695a
SHA256
375463f66e153828b330fe1734b6c56a11c9df7a9a7769e45df2ab3ee4ad44d7
SHA512
05c194923e091f4063509a3d6ab34d90fb27b58bae219fd8a3fa218eec744b7b8ca77ecff2743d2dd53926f5725dbc5d3d6940c04b1552e65358d71ba8ff13d1
SSDEEP
12288:lNwZ/kuBhmlxK7OF0IU0+gHrOekt74zm8t:lNw9ZN7Dj0+LJ74K8
Checks for missing Authenticode signature.
resource |
---|
427e84d5018f067ef7ae15fece603ddc |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapReAlloc
lstrlenA
GetLocaleInfoA
EndUpdateResourceW
GetQueuedCompletionStatus
GetCurrentProcess
SetEvent
BackupSeek
GetConsoleTitleA
ReadConsoleW
WriteFile
CreateActCtxW
InitializeCriticalSection
GetEnvironmentStrings
InitAtomTable
HeapDestroy
FindNextVolumeW
IsProcessorFeaturePresent
GetFileAttributesW
GetModuleFileNameW
DeactivateActCtx
InterlockedExchange
GetProcAddress
BeginUpdateResourceW
PrepareTape
GetProcessVersion
WriteConsoleA
LocalAlloc
RemoveDirectoryW
SetConsoleWindowInfo
GetModuleHandleA
VirtualProtect
SetProcessShutdownParameters
ReleaseMutex
GetCurrentProcessId
FindNextVolumeA
lstrcpyA
WriteConsoleW
ReadFile
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
HeapCreate
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetFilePointer
GetModuleHandleW
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CloseHandle
CreateFileA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryW
SetEndOfFile
GetProcessHeap
CreateFileW
@GetFirstVice@8
@SetViceVariants@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ