?CoolerOptions@[SXH_KK]V
?GetImpersunt@[SXH_KK]V
Static task
static1
Behavioral task
behavioral1
Sample
036609906b4d803e14eb206c6f5895c5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
036609906b4d803e14eb206c6f5895c5.exe
Resource
win10v2004-20231215-en
Target
036609906b4d803e14eb206c6f5895c5
Size
133KB
MD5
036609906b4d803e14eb206c6f5895c5
SHA1
4e4cbb3660ac620f939d5130d5d862eaf3178793
SHA256
8331dc824003b1798abd3633ce52e8bd02da390b968c655ef4774d1459593988
SHA512
05cbc0f780bb5cf01cf4ed0a7725fe7c09432e266f4c16942c0b471ca2398efe08f3c54c3eee29513b0e275f748565c30d75cb3626a32efff87356f5fd272081
SSDEEP
3072:qnpc6QQivfiPiOTGWpVBDKy+xLG2KbwA0L+efw696LN:qpc6eHobTTBDKPK/efwm
Checks for missing Authenticode signature.
resource |
---|
036609906b4d803e14eb206c6f5895c5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrCmpLogicalW
PathCompactPathExA
StrCmpNIA
GetSystemDirectoryA
lstrlenW
GetModuleHandleW
?CoolerOptions@[SXH_KK]V
?GetImpersunt@[SXH_KK]V
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ