WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
Static task
static1
Target
123854bf9a2fecff600a4a687b61dbc5
Size
20KB
MD5
123854bf9a2fecff600a4a687b61dbc5
SHA1
38b01e7903d5c80fc31737e1e743868b2c3b5bcf
SHA256
e111adb82e99c6077927676cefc78ff9fb0e9e392023e2ee8299c0a25bd693d6
SHA512
ff39315d0380dfef4537050cb11b96c9e13eb492b90f1b640a741398f88b4f01fcbc4bf992153e4d2160f580b7340f647f46952b294b6a9aad45680bcb6a9cf8
SSDEEP
384:kWqu6lqd2trNtkOfXWQJ5iV5C0bhPUtqz+RUKkZP:Ou6lq6Nt/fW32tqzhZP
Checks for missing Authenticode signature.
resource |
---|
123854bf9a2fecff600a4a687b61dbc5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ZwQueryInformationProcess
KeInsertQueueDpc
ZwCreateFile
FsRtlInitializeMcb
RtlAppendUnicodeStringToString
ExFreePoolWithTag
RtlFindLongestRunClear
ZwDisplayString
RtlImageNtHeader
READ_REGISTER_BUFFER_ULONG
CcSetDirtyPinnedData
MmIsAddressValid
FsRtlIsNtstatusExpected
DbgPrint
FsRtlLookupLastLargeMcbEntry
IoCreateSymbolicLink
RtlInt64ToUnicodeString
PsRestoreImpersonation
NtDuplicateObject
KeStackAttachProcess
IoReportResourceForDetection
ExInitializeRundownProtection
ExAllocatePool
CcSetFileSizes
strchr
FsRtlNotifyFilterChangeDirectory
CcGetDirtyPages
KdDebuggerEnabled
strcmp
IoWritePartitionTableEx
RtlReserveChunk
NtAllocateUuids
WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ