Gorgeous
Robinson
SeeYou
Static task
static1
Behavioral task
behavioral1
Sample
594a90638b861ac5c8ba6dce5bb3a408.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
594a90638b861ac5c8ba6dce5bb3a408.exe
Resource
win10v2004-20231215-en
Target
594a90638b861ac5c8ba6dce5bb3a408
Size
11.3MB
MD5
594a90638b861ac5c8ba6dce5bb3a408
SHA1
65d6dba6d617cda5a137bf11b2fd0a4f53ac9778
SHA256
fff43ddca590afbf9a6cba3ee63c02e841d16b29b8f531d1f762590b4929c7db
SHA512
dfce9b20458e7cbc9451d6acf55a7cdb9630bfbd6456182eb0ecc40d361899dc2abbd775fd5f73678fdff9ed11a7ddd4a7ee826eebb63ce0a21bb2e897dbc1bb
SSDEEP
6144:TCnOrLofYjD/VLkw3F6+VKy303Laaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaau:TCnGMAnVLkw16Y503
Checks for missing Authenticode signature.
resource |
---|
594a90638b861ac5c8ba6dce5bb3a408 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapAlloc
SetWaitableTimer
HeapFree
GetModuleHandleExW
LockFile
ConnectNamedPipe
GetCompressedFileSizeW
FindResourceExA
GlobalAlloc
GetLocaleInfoW
SizeofResource
GetSystemTimeAdjustment
InterlockedPopEntrySList
GetExitCodeProcess
GetFileAttributesW
GetAtomNameW
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GlobalUnlock
VirtualUnlock
GetConsoleAliasesW
OpenWaitableTimerW
AddVectoredExceptionHandler
AddAtomW
GetTapeParameters
GlobalFindAtomW
GlobalWire
VirtualProtect
GetFileTime
GetCurrentProcessId
EnumCalendarInfoExA
LocalFree
LocalFileTimeToFileTime
CompareStringW
CompareStringA
WriteConsoleOutputCharacterA
GetEnvironmentVariableA
EnumDateFormatsExW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwind
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
MultiByteToWideChar
CloseHandle
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapSize
FlushFileBuffers
ReadFile
SetEndOfFile
GetProcessHeap
SetEnvironmentVariableA
GetProcessDefaultLayout
AddAccessDeniedAce
IsValidSid
Gorgeous
Robinson
SeeYou
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ