GetCasual
?ZeroPointW@@YG_JU_tagSTACKFRAME64@@P6GPAXPAX_K@Z@Z
Static task
static1
Behavioral task
behavioral1
Sample
7af69a1cc5924924d4457664707fa0c3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7af69a1cc5924924d4457664707fa0c3.exe
Resource
win10v2004-20231215-en
Target
7af69a1cc5924924d4457664707fa0c3
Size
135KB
MD5
7af69a1cc5924924d4457664707fa0c3
SHA1
b8ddd00b4fbbd3fab9cfa6c39b305ed743654d24
SHA256
51bb53f91b4c174f8cbd8eee3d98aca5787240325648e77647e55c5bfc9cbc46
SHA512
8d02a0e1adeb5e0d99f9ba22c53c43c9dfd2883efb155b3c1f1ecb5dd4c4b665e08baf64aed311e2503cb249045ba8964633bc867c2bfad62e2c313c177e53cb
SSDEEP
3072:DNKJ6/DTJJkj3O0sFBKNAyMUFyXxnj8MtorcCvfIP8+wRq6+hdn:Dg6rz0eKKyryXtIMunIbGq6
Checks for missing Authenticode signature.
resource |
---|
7af69a1cc5924924d4457664707fa0c3 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PathRemoveArgsW
lstrlenW
GetCasual
?ZeroPointW@@YG_JU_tagSTACKFRAME64@@P6GPAXPAX_K@Z@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ