?CoolerOptions@[SXH_KK]V
?GetImpersunt@[SXH_KK]V
Static task
static1
Behavioral task
behavioral1
Sample
5edc09b3cc5f94b1e6a06fc59abea007.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5edc09b3cc5f94b1e6a06fc59abea007.exe
Resource
win10v2004-20231215-en
Target
5edc09b3cc5f94b1e6a06fc59abea007
Size
133KB
MD5
5edc09b3cc5f94b1e6a06fc59abea007
SHA1
86540c06004f2751fd423a641ae206db71fd6acc
SHA256
4f4cb0da7f497438cb22f14d55e5a7dfc869c6ca52f2328e7df279f9ab24a298
SHA512
5e37718410d3515a7219640505e63bd2da5d857b070f1c53855e50c83db47c38392813a17a6b315fb46960e6b4c25f3fae38a34cca8762798157b6b80910d8a6
SSDEEP
3072:qnpc6QQivfiPiOTGWpVBDKy+xLG2KbwA0L+efw696LN:qpc6eHobTTBDKPK/efwm
Checks for missing Authenticode signature.
resource |
---|
5edc09b3cc5f94b1e6a06fc59abea007 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrCmpLogicalW
PathCompactPathExA
StrCmpNIA
GetSystemDirectoryA
lstrlenW
GetModuleHandleW
?CoolerOptions@[SXH_KK]V
?GetImpersunt@[SXH_KK]V
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ