?Btvmjm_qxmSC@@YGPADI@Z
?aphkOBDTHIJFg__nzt__@@YGKM@Z
?gpJ___PNVDYR@@YGGMH@Z
?J_IMlg_i__@@YGPAEM@Z
?ZN__L_E_U__KOcw__ev_@@YGPANNPAF@Z
?_Ktd_ui@@YGPAXHE@Z
Static task
static1
Behavioral task
behavioral1
Sample
335020434f2876e2f187b291cc317209.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
335020434f2876e2f187b291cc317209.exe
Resource
win10v2004-20231215-en
Target
335020434f2876e2f187b291cc317209
Size
124KB
MD5
335020434f2876e2f187b291cc317209
SHA1
b68c6d21d95a05706c0161437d2804ff67b0759b
SHA256
dd9878a6f0551e09940f0436277d33ec642af8171ebbd63b751450795eb60d5d
SHA512
5cfa6851e136ad0e9dcf2b266365dd1447d7c7ac701c5caebfa2c2ac73ea7e62352742ca905762f719107ffdd36591d9d7150aa54aa768a31c2cf8a650deb8d5
SSDEEP
1536:05e0OvPIhrTs5995S+UZ3fsZYPNWzgOhQzqS/zA0fqfheraFrA/LoyBO5LWF+7og:OeDXIJ+TSJZ3UyVgS7G5Tc/Kt7o
Checks for missing Authenticode signature.
resource |
---|
335020434f2876e2f187b291cc317209 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrDupW
PathMakePrettyW
InterlockedExchange
GetSystemDefaultLangID
GetShortPathNameW
QueryPerformanceCounter
OpenFileMappingW
MoveFileW
GetWindowsDirectoryA
InterlockedExchangeAdd
GetCurrentProcessId
lstrcmpiW
ExitProcess
ImageList_GetIcon
DestroyPropertySheetPage
ImageList_Remove
GetWindowDC
GetSubMenu
RegisterClassA
FindWindowExW
GetKeyState
SetCursor
GetMessageTime
GetParent
InsertMenuItemW
LoadStringW
IsCharAlphaA
SetWindowTextA
_stricmp
memset
CreateRectRgnIndirect
RealizePalette
ExcludeClipRect
PtInRegion
GetObjectW
?Btvmjm_qxmSC@@YGPADI@Z
?aphkOBDTHIJFg__nzt__@@YGKM@Z
?gpJ___PNVDYR@@YGGMH@Z
?J_IMlg_i__@@YGPAEM@Z
?ZN__L_E_U__KOcw__ev_@@YGPANNPAF@Z
?_Ktd_ui@@YGPAXHE@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ