??0MD5@@QAE@XZ
?Decode@MD5@@CAXPAKPAEI@Z
?Encode@MD5@@CAXPAEPAKI@Z
?Final@MD5@@QAEXXZ
?Init@MD5@@QAEXXZ
?MD5Transform@MD5@@CAXQAKQAE@Z
?Update@MD5@@QAEXPAEI@Z
?digestMemory@MD5@@QAEPADPAEH@Z
?digestString@MD5@@QAEPADPAD@Z
?writeToString@MD5@@QAEXXZ
Static task
static1
Behavioral task
behavioral1
Sample
strings3.exe
Resource
win7-20231129-en
Target
strings3.exe_
Size
51KB
MD5
7ca469245329b093fc6284e55ebf993e
SHA1
387443a22d2f8e0a26841b6bf7ec05b9c070d0c3
SHA256
5fdbaad8759fd55ed33a1e834cccc6da0d78032f1f309b0bc46b52dfb2221ed4
SHA512
ca7a563e457ba9e115ab9547c4b58f05993693aeb4b1bfe58e7f738ef267027aad0f7a445f31ab6df209f76fcc234a28ffe15ed37a90c6ed1592201e893cf6a9
SSDEEP
1536:SNcaZBSAufD9jmEVYCdkCUN9iL5XJqFhFImPS:0B
Checks for missing Authenticode signature.
resource |
---|
strings3.exe_ |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FindResourceA
ExitProcess
memcpy
memset
sprintf
LoadStringA
MessageBoxA
??0MD5@@QAE@XZ
?Decode@MD5@@CAXPAKPAEI@Z
?Encode@MD5@@CAXPAEPAKI@Z
?Final@MD5@@QAEXXZ
?Init@MD5@@QAEXXZ
?MD5Transform@MD5@@CAXQAKQAE@Z
?Update@MD5@@QAEXPAEI@Z
?digestMemory@MD5@@QAEPADPAEH@Z
?digestString@MD5@@QAEPADPAD@Z
?writeToString@MD5@@QAEXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ