LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
Static task
static1
Behavioral task
behavioral1
Sample
4dbae398aab69e5cc486104f0ab9e12d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4dbae398aab69e5cc486104f0ab9e12d.exe
Resource
win10v2004-20231215-en
Target
4dbae398aab69e5cc486104f0ab9e12d
Size
829KB
MD5
4dbae398aab69e5cc486104f0ab9e12d
SHA1
fa5a3707d8fdbd4fbb81187f02503133a1a0f55a
SHA256
c70234e219e259aa62ea7a3ba967e064d0d7e8943ef983440f4a48cd81af3af6
SHA512
a24a92a73059483e60c8b6c64cce337b75ae823fc317010907579d777b309e450a94df0c575a6c36d0786396cc207afc6c4d9932d0f2f0e7759fcd05401bb65a
SSDEEP
12288:NvglhsWHdzhWZD8kmz8RLDBH6iBia3B8pMc96Zipc6yGFfBXiPuRlp9aHB:NolhH1AZIqdkb6ZANFpCGlp
Checks for missing Authenticode signature.
resource |
---|
4dbae398aab69e5cc486104f0ab9e12d |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrW
GetDC
BitBlt
FreeSid
DragQueryFileW
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE