BeginUpdateResourceW
EndUpdateResourceW
UpdateResourceW
Static task
static1
Behavioral task
behavioral1
Sample
dup2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dup2.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
dup2_help.chm
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
dup2_help.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
madres.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
madres.dll
Resource
win10v2004-20231215-en
Target
01878960a8625d4ef7ec5a6c6c24d0d2
Size
335KB
MD5
01878960a8625d4ef7ec5a6c6c24d0d2
SHA1
283563f9755802c262590928444fad5f427df07d
SHA256
d6cf9e58112087f4daeda4b5cbf4ec81ea8f98d97a3fae691075f884c2f9ff76
SHA512
6ad6aba203c7df3e3442a376dddb5722f8067c111b14d29ced0e7c6a8b1ca14f1f9925b3694d9168a5837b960465c64b2ffd71a32f2a2925245897a961bf04f4
SSDEEP
6144:7cXmdpPxMrFoFLSPEPpv1QESO93zouXYOPKLER+4g2z4Tyet:7cXAMrFB0QPO93BIdLERDg2kt
Checks for missing Authenticode signature.
resource |
---|
unpack001/dup2.exe |
unpack001/madres.dll |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetDlgItemTextA
SetWindowLongA
ShowWindow
UpdateWindow
SetCapture
SendMessageA
ReleaseCapture
PtInRect
MessageBoxA
LoadIconA
IsDlgButtonChecked
InvalidateRect
GetWindowTextLengthA
GetWindowRect
GetParent
EnableWindow
GetDlgItemTextA
GetDlgItem
GetDlgCtrlID
GetCursorPos
GetCapture
GetActiveWindow
EndDialog
DialogBoxParamA
CreateDialogParamA
CheckDlgButton
CharUpperA
CallWindowProcA
wsprintfA
FlushFileBuffers
FindFirstFileA
WriteFile
FindClose
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
CloseHandle
CompareStringA
CopyFileA
CreateFileA
CreateFileMappingA
CreateProcessA
CreateThread
DeleteFileA
EnumResourceNamesA
ExitProcess
FindResourceA
FreeLibrary
GetCommandLineA
GetFileAttributesA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetSystemDirectoryA
GetSystemTime
LoadLibraryA
LoadResource
MapViewOfFile
ReadFile
RtlMoveMemory
RtlZeroMemory
SetUnhandledExceptionFilter
SizeofResource
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WritePrivateProfileStringA
ShellExecuteA
DragQueryFileA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
SelectObject
GetObjectA
SetTextColor
SetBkMode
GetStockObject
CreateFontIndirectA
InitCommonControls
GetOpenFileNameA
GetSaveFileNameA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
BeginUpdateResourceW
EndUpdateResourceW
UpdateResourceW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ