?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
Static task
static1
Behavioral task
behavioral1
Sample
5924da79ec45e7ace6e57d31547ba079.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5924da79ec45e7ace6e57d31547ba079.exe
Resource
win10v2004-20231215-en
Target
5924da79ec45e7ace6e57d31547ba079
Size
186KB
MD5
5924da79ec45e7ace6e57d31547ba079
SHA1
54a9c7647a93359ffc50e0a9e2c0695161b55338
SHA256
5adc4cbb12d58c6abdbdf3ddc451cbc071a1167c35a323564f6890b7e1b66f14
SHA512
ec6034a6b00be61954cd9d546deeb9419efdb2f14fe14611ba0b12760e3950d4734d68ce75b25843ffbd3ea636e387b0e20dd58428d2173b8333fc28c6a63433
SSDEEP
3072:C4SEMAmZZ7RUqUQRBE+PUswbIs46mc6VuEn813Rw5LlOEnzn6YBPpS8IkRcb:qjNV/UUK+8swb0c6VudQky6KPNYb
Checks for missing Authenticode signature.
resource |
---|
5924da79ec45e7ace6e57d31547ba079 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrToIntA
PathStripPathW
LoadLibraryExA
GetModuleHandleA
lstrcmpA
?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ