?NuyqylfaxXcXpegwbNxQ@@YGPAG_NM@Z
?aKxpyMfookbw@@YGPAKPAH@Z
?NORSvwywvplycq@@YGEPAD@Z
?RsdkecAektIlekgoSAo@@YGJFE@Z
?OoxFaAkxcAlDzMiIjuGz@@YGXFK@Z
?oIyoNledxtFuzu@@YGJPAH@Z
?yGdtvaMyEn@@YGNGM@Z
Static task
static1
Behavioral task
behavioral1
Sample
0b41b00bb928d7fbe1c00ec9abc75596.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b41b00bb928d7fbe1c00ec9abc75596.exe
Resource
win10v2004-20231215-en
Target
0b41b00bb928d7fbe1c00ec9abc75596
Size
101KB
MD5
0b41b00bb928d7fbe1c00ec9abc75596
SHA1
fcdf41bab9d2af908c2862f6f2eb79ceffe4fab2
SHA256
20c56b3ffd9750a2c5f063b2b97f380cf10b217e2e7753bdbe9dc1c3a7dd6083
SHA512
19c04f290585a974f4fc45b4fe883f484b041e70dae19d1d70cc60541f66b71388cb48424b21c0a0eefba0f78a2bec237532cadad4c66d1f51070e915adbedb9
SSDEEP
3072:F1JBIhd/opty8LLrsdbcnvpxt0j7EmvVH3S+3wj:F24phrabcnhxyESZ34
Checks for missing Authenticode signature.
resource |
---|
0b41b00bb928d7fbe1c00ec9abc75596 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetKeyboardType
DialogBoxIndirectParamW
LoadImageW
GetClassWord
LoadCursorA
GetWindow
DestroyAcceleratorTable
OpenDesktopW
GetMenu
IsIconic
CreateCaret
wsprintfA
CreateHatchBrush
ResizePalette
CreatePenIndirect
GetStockObject
Ellipse
StartPage
ExcludeClipRect
GetModuleHandleA
DuplicateHandle
GetThreadLocale
CreateEventW
PulseEvent
SetErrorMode
GetUserDefaultLangID
GetProcAddress
GetModuleHandleW
CreateFileW
CloseHandle
SetThreadExecutionState
GetTickCount
?NuyqylfaxXcXpegwbNxQ@@YGPAG_NM@Z
?aKxpyMfookbw@@YGPAKPAH@Z
?NORSvwywvplycq@@YGEPAD@Z
?RsdkecAektIlekgoSAo@@YGJFE@Z
?OoxFaAkxcAlDzMiIjuGz@@YGXFK@Z
?oIyoNledxtFuzu@@YGJPAH@Z
?yGdtvaMyEn@@YGNGM@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ