CRP038
READ5884B
Static task
static1
Behavioral task
behavioral1
Sample
4f086a5fdf6c3d0b2e6fe42ba16f5846.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f086a5fdf6c3d0b2e6fe42ba16f5846.dll
Resource
win10v2004-20231215-en
Target
4f086a5fdf6c3d0b2e6fe42ba16f5846
Size
209KB
MD5
4f086a5fdf6c3d0b2e6fe42ba16f5846
SHA1
edbb85e0dbda5fd208c23d4e0eb5a578e4535ac2
SHA256
4ea945759bd82552ee2196e861c6173def8e81862bcd717e627f481213e2f03c
SHA512
3fe23a31bf50fd5f42d7982d268b104dfe1a18a5500e0b30c633d3fcd6639a828533bdb25ecee5cbedaa181fbe116f926d3bf1f55e6a0cf536a1a3ed02fcd741
SSDEEP
3072:ZSu2KbYJuS6Tm9oI4Ysc3NI6V6PRiFJvT6ZZffUVAjGjvs/evGHpYXR/llr68isn:ZFvYJgmj3rAQPvTEFMVOGRGWFTrWOh
Checks for missing Authenticode signature.
resource |
---|
4f086a5fdf6c3d0b2e6fe42ba16f5846 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
CreateFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStringTypeA
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
CharLowerBuffA
CharNextA
CharUpperBuffA
MessageBoxA
LAYOUT
OVRNUM
F3468
DATECOMPARE
CRP038
READ5884B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ