?_Qo_feG__EP@@YGIPAJ@Z
?_xx_jfaJ_o___BTTF@@YGDIG@Z
?TJ_X_Y_A@@YGXDPAI@Z
?uvIe__qlg@@YGXGE@Z
?UD_KR_WLZNRvoayb_mj@@YGJJ@Z
?OOANSw_@@YGGF@Z
?m_oci_wfh@@YGPAFPADG@Z
Static task
static1
Behavioral task
behavioral1
Sample
157bd085f519a81226a6f43205542878.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
157bd085f519a81226a6f43205542878.exe
Resource
win10v2004-20231215-en
Target
157bd085f519a81226a6f43205542878
Size
44KB
MD5
157bd085f519a81226a6f43205542878
SHA1
8f4aec8316189fc65a78cfd4224cef97e673cbb8
SHA256
123a274c47eb652c1cbacffc6fa21f2f60e64f66ca844d6d09e7750c2ea85cdd
SHA512
17732ec39a2da13789b2ca9517a8cab2691b5e6dbaff06b6175de4d34ef553723d909ef9f8c38159a775e149e6372a1e827e31c753152445415be8511840b2fb
SSDEEP
768:lNuGcK5ri2DF7D49Xqj/QJJJQiNAeUjqiugJbXXLbJC6WvVKoYXN4yZK:bur4fKqAmiSe/iHR5C6dzd4R
Checks for missing Authenticode signature.
resource |
---|
157bd085f519a81226a6f43205542878 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
OffsetViewportOrgEx
PolyBezier
SetBitmapDimensionEx
LineTo
GetTextExtentPointA
GetWindowOrgEx
GetTempPathW
lstrcmpiA
SetThreadExecutionState
ExitProcess
GetACP
GetFileAttributesExW
WaitForSingleObjectEx
lstrlenA
GlobalFlags
GetCurrentThread
EnterCriticalSection
LockWindowUpdate
UnloadKeyboardLayout
GetForegroundWindow
GetSysColorBrush
TrackPopupMenu
MapDialogRect
wvsprintfW
DrawAnimatedRects
GetShellWindow
LoadCursorA
DrawStateW
LoadIconW
GetDesktopWindow
?_Qo_feG__EP@@YGIPAJ@Z
?_xx_jfaJ_o___BTTF@@YGDIG@Z
?TJ_X_Y_A@@YGXDPAI@Z
?uvIe__qlg@@YGXGE@Z
?UD_KR_WLZNRvoayb_mj@@YGJJ@Z
?OOANSw_@@YGGF@Z
?m_oci_wfh@@YGPAFPADG@Z
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ