func1
func2
start
Static task
static1
Behavioral task
behavioral1
Sample
5d2e0d16ce66bc43c9aaeff3d6e419d1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5d2e0d16ce66bc43c9aaeff3d6e419d1.exe
Resource
win10v2004-20231215-en
Target
5d2e0d16ce66bc43c9aaeff3d6e419d1
Size
68KB
MD5
5d2e0d16ce66bc43c9aaeff3d6e419d1
SHA1
2dcbc4a258d11e074ee0e652b95dd33b11df5f67
SHA256
e6a8a00358d5bf0fc5c7c3c5ef66dce87df7db042d729be6927d20bb0d77f1fc
SHA512
bdebeeb9c049ea0a6b76a11b0ab490e9c6e0f9d49b7a9a8afd7c9950f7bc3966e69d5688c4cf2e2227d91ab209c2e797325fa35525a8503949538aed5ad96194
SSDEEP
1536:g5NqCJWGdOJZ2PMhX6M4MMyRNTpfK6XVT4:g5NqCQZAM1DbdRXVc
Checks for missing Authenticode signature.
resource |
---|
5d2e0d16ce66bc43c9aaeff3d6e419d1 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualFree
VirtualAlloc
ExitProcess
IsBadReadPtr
GetProcAddress
VirtualProtect
LoadLibraryA
lstrcmpiA
CreateThread
GetModuleHandleA
DefWindowProcA
SendMessageA
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
func1
func2
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ