ebsgwzgrtnm
hrvyihwp
xbqkuiroih
Static task
static1
Behavioral task
behavioral1
Sample
08f8960e1eb7618757e36051832f297e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08f8960e1eb7618757e36051832f297e.dll
Resource
win10v2004-20231215-en
Target
08f8960e1eb7618757e36051832f297e
Size
124KB
MD5
08f8960e1eb7618757e36051832f297e
SHA1
296a5b78a63a287179a58a0505281f5652bd9ad7
SHA256
4ffe4d5c30dbc494b956be2a14f06b205b57b9e3e94dd4bb80ecaaaa73dbde46
SHA512
d67976278cede166db68a4539a14b826b909eb7fdccb559d1ed6ccc5662d3b37b5bdd9c2ad075f32c57163899d2f364088c0b7f157245e0acc0ab3779507ba22
SSDEEP
1536:tirNjV7sKaHYEY7UpC9ktoPQNDbEH1Wgryt5PDT4azWVdh9lNyeZnTdWn3jFS:tiBhsK6YEG/8DQVWNDVWVdDPZTdWTc
Checks for missing Authenticode signature.
resource |
---|
08f8960e1eb7618757e36051832f297e |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
lstrcmpiA
TerminateProcess
GetProcessHeap
LoadLibraryA
IsBadReadPtr
HeapAlloc
GetProcAddress
AssignProcessToJobObject
UpdateResourceA
GetCurrentProcess
GetDateFormatA
SetPropA
AnimateWindow
CheckMenuRadioItem
MapVirtualKeyW
LineTo
EndPath
SetGraphicsMode
GetServiceDisplayNameA
ebsgwzgrtnm
hrvyihwp
xbqkuiroih
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ