?_tp_q_cu_I_tmj_v_v@@YGIJ@Z
?KKY__VFI@@YGXK@Z
?P_JytmucRnihfr__@@YGEJF@Z
?CSERPi_XMVWQJUYN@@YGKJPAN@Z
?HI_VswOZ@@YGPAFPAF@Z
?H___LWOOBBX_SZGX_d@@YGKPAGPAI@Z
Static task
static1
Behavioral task
behavioral1
Sample
6e6c6dc982a5b1f9635f6568cb847473.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e6c6dc982a5b1f9635f6568cb847473.exe
Resource
win10v2004-20231215-en
Target
6e6c6dc982a5b1f9635f6568cb847473
Size
67KB
MD5
6e6c6dc982a5b1f9635f6568cb847473
SHA1
f75f96d4b7d83fd574f26de9e00aa897ab1ef2ff
SHA256
db8849ba83a2cae1575653ffa0b9cca273f3e00429892e4fd0087c93cc88c94e
SHA512
6a68d4836862414a0137e4cd7868d4af0fa1f14d58f8d676798a60f0aa8279296516d5a76c78d5bf602763781d38add6a55e4e3d71d3fbd79f6525d68ac926e3
SSDEEP
768:qNjG4lDDe0ObeXAkRBNlNAaQHdQG1MujG/cYgug/+j1mmiR78B3VTlQS3jpeXGx0:4Je0ObAR7SxmcYPg0Qd0hlEpt8U4y
Checks for missing Authenticode signature.
resource |
---|
6e6c6dc982a5b1f9635f6568cb847473 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetParent
UnloadKeyboardLayout
CharUpperW
InSendMessageEx
GetScrollPos
GetWindowRect
MapVirtualKeyA
GetClassNameW
PostThreadMessageW
DrawFrameControl
CharToOemBuffA
EnableMenuItem
IsWindowUnicode
LoadIconA
_stricmp
memset
PathMakePrettyW
StrSpnA
FileTimeToSystemTime
GetCurrentThreadId
ExitProcess
OpenFileMappingW
GetLocalTime
SetSystemTime
InterlockedExchangeAdd
InterlockedExchange
lstrlenA
OpenFileMappingA
GetCurrentProcessId
EnumFontsW
GetCurrentObject
ScaleViewportExtEx
SelectPalette
CreateFontIndirectW
SaveDC
?_tp_q_cu_I_tmj_v_v@@YGIJ@Z
?KKY__VFI@@YGXK@Z
?P_JytmucRnihfr__@@YGEJF@Z
?CSERPi_XMVWQJUYN@@YGKJPAN@Z
?HI_VswOZ@@YGPAFPAF@Z
?H___LWOOBBX_SZGX_d@@YGKPAGPAI@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ