BeginUpdateResourceW
EndUpdateResourceW
UpdateResourceW
Static task
static1
Behavioral task
behavioral1
Sample
dup2_HH.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dup2_HH.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
dup2_help.chm
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
dup2_help.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
madres.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
madres.dll
Resource
win10v2004-20231215-en
Target
00e88e533b0b93d5f11df890c2ac9b4b
Size
364KB
MD5
00e88e533b0b93d5f11df890c2ac9b4b
SHA1
d1f0aa0609c8362422f8274d7ac964d9a8208ae9
SHA256
7ca0fb3261134b6b3b3a0594098261cb73c0e1eadcd028a94655e3821b34fdb3
SHA512
aa6e968794a8ac184fe137b038f2937a7dabf96d41bd157a092e8a4aff2d23b19f0f74d9064820d2ed89a1291123eb414650898354b84bfb3c21e9e625f9c602
SSDEEP
6144:eDoiN7dF4m5UV7T6P0EQK9TW7zu+FvIJ8/HauOa8gqgvXj21wN2Z8gmNH8Xa+yd/:ehVr4matT6P+MTW7zh9Ha1PJgPj5q8DL
Checks for missing Authenticode signature.
resource |
---|
unpack001/dup2_HH.exe |
unpack001/madres.dll |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetWindowLongA
ShowWindow
UpdateWindow
SetDlgItemTextA
SetDlgItemInt
SetCapture
SendMessageA
ReleaseCapture
PtInRect
MessageBoxA
LoadIconA
IsDlgButtonChecked
InvalidateRect
GetWindowTextLengthA
GetWindowRect
GetWindowLongA
EnableWindow
GetParent
GetDlgItemTextA
GetDlgItem
GetDlgCtrlID
GetCursorPos
GetCapture
GetActiveWindow
EndDialog
DialogBoxParamA
CreateDialogParamA
CheckDlgButton
CharUpperA
CallWindowProcA
wsprintfA
FlushFileBuffers
FindFirstFileA
WriteFile
FindClose
lstrlenA
lstrcpyA
lstrcmpiA
CloseHandle
CompareStringA
CreateFileA
CreateFileMappingA
CreateProcessA
CreateThread
DeleteFileA
EnumResourceNamesA
ExitProcess
FindResourceA
FreeLibrary
GetCommandLineA
GetFileAttributesA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetSystemDirectoryA
GetSystemTime
LoadLibraryA
LoadResource
MapViewOfFile
ReadFile
RtlMoveMemory
RtlZeroMemory
SetUnhandledExceptionFilter
SizeofResource
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WritePrivateProfileStringA
lstrcatA
ShellExecuteA
DragQueryFileA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RoundRect
CreateSolidBrush
SetTextColor
SetBkMode
SelectObject
GetObjectA
GetStockObject
CreateFontIndirectA
InitCommonControls
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
BeginUpdateResourceW
EndUpdateResourceW
UpdateResourceW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ