Albus
Coffe
Super
SuspendYourMind
Static task
static1
Behavioral task
behavioral1
Sample
5da9c61a37ba161b8dbe3eaa80c2c3c2e0019ca412a5462489ffc208108bbc0b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5da9c61a37ba161b8dbe3eaa80c2c3c2e0019ca412a5462489ffc208108bbc0b.exe
Resource
win10v2004-20231222-en
Target
1c01ba624e0a8b782fc1f8a8d6b5ce85
Size
4.4MB
MD5
1c01ba624e0a8b782fc1f8a8d6b5ce85
SHA1
02bf9a096c203f1fb28285f8e125cf65dc0f2b46
SHA256
ec160b94546c015c5f899525ff04cc60083696e9113e2deb996066026d762cce
SHA512
c95c67b6c5f03d5db8e82cc40bdd79525690d04beded08f7d741c04be5ccd4aadbce4efa1be5db75d3015f813ed4a7d7d23ed7bb31d9748075fef9ee4435c521
SSDEEP
98304:9A5RM5UWqlf+Q8PNVGyylBewJ2ny433Io3LMm6QfnS5Lmc:CRM5UWif+Q8PrGVMwaL3LMm64iz
Checks for missing Authenticode signature.
resource |
---|
unpack001/5da9c61a37ba161b8dbe3eaa80c2c3c2e0019ca412a5462489ffc208108bbc0b |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FreeLibrary
SystemTimeToTzSpecificLocalTime
SetUnhandledExceptionFilter
InterlockedDecrement
SetMailslotInfo
InitializeSListHead
CancelWaitableTimer
GetTimeFormatA
LockFile
ConnectNamedPipe
GetTickCount
GetProcessHeap
FindNextVolumeMountPointA
WriteFile
TzSpecificLocalTimeToSystemTime
GlobalAlloc
GetSystemPowerStatus
GetSystemTimeAdjustment
GetFileAttributesA
HeapCreate
GetConsoleAliasW
GetAtomNameW
IsDBCSLeadByte
SetEndOfFile
VirtualUnlock
CreateJobObjectA
LCMapStringA
GetConsoleOutputCP
CreateDirectoryA
GetCurrentDirectoryW
GetProcAddress
HeapUnlock
SetFileAttributesA
LoadLibraryA
AddVectoredExceptionHandler
FindAtomA
GetTapeParameters
GetModuleFileNameA
GetModuleHandleA
EraseTape
FreeEnvironmentStringsW
ScrollConsoleScreenBufferA
SetProcessShutdownParameters
LocalFileTimeToFileTime
CompareStringW
CompareStringA
WriteConsoleW
SetLocalTime
EnumDateFormatsExW
WriteConsoleOutputCharacterW
HeapCompact
GlobalUnlock
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
Sleep
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
HeapSize
SetConsoleCtrlHandler
InterlockedExchange
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetStdHandle
ReadFile
GetLocaleInfoW
GetTimeZoneInformation
WriteConsoleA
SetEnvironmentVariableA
GetDesktopWindow
GetProcessWindowStation
BackupEventLogA
AbortSystemShutdownA
AddAccessDeniedAce
EqualPrefixSid
GetLengthSid
Albus
Coffe
Super
SuspendYourMind
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ