CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
Static task
static1
Behavioral task
behavioral1
Sample
b0decccfa16089526f424a4b5cc79bb6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b0decccfa16089526f424a4b5cc79bb6.exe
Resource
win10v2004-20231222-en
Target
b0decccfa16089526f424a4b5cc79bb6
Size
5.3MB
MD5
b0decccfa16089526f424a4b5cc79bb6
SHA1
b4a54080b53bb8e900edc1fd64918d99b0856d23
SHA256
7870f35998df637ea6d9fb2bbad677315a68d46d972eb27acd68e7c327706145
SHA512
fa328c209ce3805d5e867f2f7b78111d2efe7fc26c567158d30ee2d4d2f414868210ebf8c2a75c5a8b7dd9eaa97908e894550e379a7119cd7514f9d3c9b3f3aa
SSDEEP
98304:UwL40vKNuBlawbeeg/BgWaf2VXu4wCdjF3CJEI33sHkPbHT02AzP7g/DD52w:UwL40vFlaKeeg/BgWaf2VXu4jfqEI33n
Checks for missing Authenticode signature.
resource |
---|
b0decccfa16089526f424a4b5cc79bb6 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE