_geek@8
_gekelberifin@8
Static task
static1
Behavioral task
behavioral1
Sample
9022cbe35fa75e1a3a71f754a4603306.exe
Resource
win7-20231215-en
Target
9022cbe35fa75e1a3a71f754a4603306
Size
424KB
MD5
9022cbe35fa75e1a3a71f754a4603306
SHA1
12514c75aa710ff5de150c259eea47c30821a6f7
SHA256
aa19fb7d4f44f064ce6a6b5d8fc657d557fbe0d6c43082ea33011a7b17d903b0
SHA512
407ed7fe5f93253570ea1d0fba496876e1c5d7efcc3d051c655169c235167d05068d4a127f9ba3a52cf0db4ef3ea03afeaa668adc222fc948d956930603c7789
SSDEEP
12288:v24e3d9nff5fNsxmbZjMWDKZ/8DPt8ydtPv:wd9nff5WxmbBdDqkPt8+tPv
Checks for missing Authenticode signature.
Processes:
resource |
---|
9022cbe35fa75e1a3a71f754a4603306 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LocalUnlock
FileTimeToDosDateTime
lstrlenA
FindResourceExW
LoadLibraryExW
ReadConsoleA
InterlockedDecrement
ScrollConsoleScreenBufferW
GetUserDefaultLCID
InterlockedCompareExchange
CallNamedPipeW
FreeEnvironmentStringsA
_lclose
SetTapeParameters
GetSystemTimeAsFileTime
WriteFile
TlsSetValue
LoadLibraryW
Sleep
GetVersionExW
DeleteVolumeMountPointW
LeaveCriticalSection
WritePrivateProfileStructW
SetConsoleMode
WriteConsoleW
lstrcatA
DisconnectNamedPipe
ReleaseActCtx
SetCurrentDirectoryA
GetLastError
IsDBCSLeadByteEx
GetProcAddress
BeginUpdateResourceW
CreateNamedPipeA
SetVolumeLabelW
WriteProfileSectionA
IsValidCodePage
GetLocalTime
LoadLibraryA
LocalAlloc
IsSystemResumeAutomatic
WaitForMultipleObjects
GetPrivateProfileSectionNamesA
GetOEMCP
GetThreadPriority
WaitCommEvent
GetCommTimeouts
EnumDateFormatsW
OpenSemaphoreW
AreFileApisANSI
lstrcpyA
GetModuleHandleW
ExitProcess
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
HeapSize
RtlUnwind
GetLocaleInfoA
WideCharToMultiByte
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleA
RaiseException
_geek@8
_gekelberifin@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ