__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
e80d8175754e52f4ca5c8ecc0f8bb130.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e80d8175754e52f4ca5c8ecc0f8bb130.exe
Resource
win10v2004-20231215-en
Target
e80d8175754e52f4ca5c8ecc0f8bb130.exe
Size
79KB
MD5
e80d8175754e52f4ca5c8ecc0f8bb130
SHA1
2edab0edaf08f41ef9a2c3058d603b445b4e46b3
SHA256
ac658056e897baf148c476691c1f641a066cdb26fab1156b56e52b9b9995443b
SHA512
118af348f12d376ad11dc99b47021c6c488f11685d97ac8d32f8fbcc4d29123ab840d67c6b4ab3575d955fb98cb2b44e42e8b159cb0adb0a56675e67461a6e09
SSDEEP
1536:zvTHcsSgtOb+hUeTcWfjvZ7OQA8AkqUhMb2nuy5wgIP0CSJ+5yaB8GMGlZ5G:zvTTPUtgvoGdqU7uy5w9WMyaN5G
Checks for missing Authenticode signature.
resource |
---|
e80d8175754e52f4ca5c8ecc0f8bb130.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ