__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
201ae91b99cfe4d0068c92e4bc27ace8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
201ae91b99cfe4d0068c92e4bc27ace8.exe
Resource
win10v2004-20231222-en
Target
201ae91b99cfe4d0068c92e4bc27ace8
Size
79KB
MD5
201ae91b99cfe4d0068c92e4bc27ace8
SHA1
c997f13ce204c767b6a3a1abd94e14559a3014c2
SHA256
edeb7c708121032ad5736b7de2e8807533fe57f6fac7d2c088bf4886e6eb0193
SHA512
de01584e671150b010cd1fb30c6bc03422d04487d41b3a3e90d9a6036566bfd92997af24be025cd3c45c1b5b9a988da6479e3a1d902212d38cd5cba77327a2df
SSDEEP
1536:SVg4c5Pruuq0hUHnKaN8gHg+AO945gvI0GcGd:Sxk7q0aNxPN9egv4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
201ae91b99cfe4d0068c92e4bc27ace8 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WinExec
WriteFile
WriteProfileStringA
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE