WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
Static task
static1
Target
1bfa0aeec46d9c0243ce100a93fc3248
Size
20KB
MD5
1bfa0aeec46d9c0243ce100a93fc3248
SHA1
6571883abf737c1689ea2100aadfd154945294b8
SHA256
e83039c3fb2f3f4eef4ceb3d60f73f721d96d7590ff99c40aa91bba38789a70b
SHA512
c88e72f4eda3aa7bdb6d8beb7684a8875b1f6ffa9297e915956d8be95e1c76e8b0616ffe61c94d39f0058ac84b050702cdf858436d27c2e72ee42af3f650c681
SSDEEP
384:eWqu6lqd2trNtkOfXWQJ5iV5C0bhPUtqz+RUKkZP:ku6lq6Nt/fW32tqzhZP
Checks for missing Authenticode signature.
resource |
---|
1bfa0aeec46d9c0243ce100a93fc3248 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ZwQueryInformationProcess
KeInsertQueueDpc
ZwCreateFile
FsRtlInitializeMcb
RtlAppendUnicodeStringToString
ExFreePoolWithTag
RtlFindLongestRunClear
ZwDisplayString
RtlImageNtHeader
READ_REGISTER_BUFFER_ULONG
CcSetDirtyPinnedData
MmIsAddressValid
FsRtlIsNtstatusExpected
DbgPrint
FsRtlLookupLastLargeMcbEntry
IoCreateSymbolicLink
RtlInt64ToUnicodeString
PsRestoreImpersonation
NtDuplicateObject
KeStackAttachProcess
IoReportResourceForDetection
ExInitializeRundownProtection
ExAllocatePool
CcSetFileSizes
strchr
FsRtlNotifyFilterChangeDirectory
CcGetDirtyPages
KdDebuggerEnabled
strcmp
IoWritePartitionTableEx
RtlReserveChunk
NtAllocateUuids
WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ