?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
Static task
static1
Behavioral task
behavioral1
Sample
13673b6a72865222d818d3cd3eda9a5d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13673b6a72865222d818d3cd3eda9a5d.exe
Resource
win10v2004-20231215-en
Target
13673b6a72865222d818d3cd3eda9a5d
Size
186KB
MD5
13673b6a72865222d818d3cd3eda9a5d
SHA1
d36167e9ddf55abfc8684d168e802dadadfe3176
SHA256
6f601c3ecd63bdb02d30a8e5d18c7e0a61e0231c825458cc7d23518192febd1a
SHA512
3f284fc2dadd10cc4cbd048de5c781c2dec393d48a06b62bc4963207530592be5a14da5c506ff7eeda27b9d0c5968671ad1c6da5f0af498ee811fa4c84ae45b4
SSDEEP
3072:C4SEMAmZZ7VzqUQRBE+PUswbIs46mc6VuEn813Rw5LlOEnzn6YBPpS8IkRcb:qjNVMUUK+8swb0c6VudQky6KPNYb
Checks for missing Authenticode signature.
resource |
---|
13673b6a72865222d818d3cd3eda9a5d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrToIntA
PathStripPathW
LoadLibraryExA
GetModuleHandleA
lstrcmpA
?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ