@@Unit1@Finalize
@@Unit1@Initialize
@@Unit2@Finalize
@@Unit2@Initialize
__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
35ebcb2933cbd40c8d803c9b8cbbb7e4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
35ebcb2933cbd40c8d803c9b8cbbb7e4.exe
Resource
win10v2004-20231222-en
Target
35ebcb2933cbd40c8d803c9b8cbbb7e4
Size
163KB
MD5
35ebcb2933cbd40c8d803c9b8cbbb7e4
SHA1
8c43890fd518c9813e12c5a2b671d135c58f1c87
SHA256
bad45b382a77f9a141e0e7a8d87f956e895ae1299b5ed94acccabda3fc34fe0f
SHA512
fc87f53afe8e94bf2ea0394b19d526353270c0ccc33cfd6d4c3ce14229a72f2a51bb16add5e218cfb8cbdb90e330b902c483e7ca3038da6b6e2dfda1b028ccfa
SSDEEP
3072:K9ZXDpVb7JINXJw8CYXwv6QWRJnpkKSqDPDW6murronU:KpXJ+Zw/YXUChe6mE
Checks for missing Authenticode signature.
resource |
---|
35ebcb2933cbd40c8d803c9b8cbbb7e4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
@@Unit1@Finalize
@@Unit1@Initialize
@@Unit2@Finalize
@@Unit2@Initialize
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE