@GetAnotherVice@12
@SetFirstEverVice@4
Static task
static1
Behavioral task
behavioral1
Sample
488935e18ff624c2b3ce582665c5f554.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
488935e18ff624c2b3ce582665c5f554.exe
Resource
win10v2004-20231215-en
Target
488935e18ff624c2b3ce582665c5f554
Size
181KB
MD5
488935e18ff624c2b3ce582665c5f554
SHA1
bf47923ee49f735ad367a19a41dad2c1c6e48db2
SHA256
9838a4a902ce7a56adf417d595b7d98258f1ccd6a2b6beebdfd43133edeaacd2
SHA512
ff6ac1fb47da31dafc6e4c1de2f3c59a41f822e3afd4cbdfdc89c1598e4fe5388c2f90448e2ff1bb8c6073c09730c262162712ac0bbd125062441770f15bc5d4
SSDEEP
3072:uELTWW/LnTd82FgUODbBNR7R6c/mo9b8Z7yq:DL1zTSFMc/mo9H
Checks for missing Authenticode signature.
resource |
---|
488935e18ff624c2b3ce582665c5f554 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumDateFormatsExW
EndUpdateResourceW
InterlockedIncrement
MoveFileExW
GetConsoleAliasA
InterlockedDecrement
WritePrivateProfileSectionA
GetSystemWindowsDirectoryW
GetEnvironmentStringsW
WaitForSingleObject
SetConsoleScreenBufferSize
GetComputerNameW
SetEvent
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleOutputA
GetUserDefaultLangID
CreateActCtxW
GetConsoleCP
GetVersionExW
GetFileAttributesA
DnsHostnameToComputerNameW
lstrcpynW
VerifyVersionInfoA
IsBadWritePtr
GetModuleFileNameW
GetCompressedFileSizeA
GetSystemDirectoryA
CreateFileW
lstrcatA
GetACP
GetVolumePathNameA
lstrlenW
SetConsoleTitleA
FlushFileBuffers
InterlockedExchange
GetLastError
GetProcAddress
BeginUpdateResourceW
CreateTimerQueueTimer
LocalLock
EnterCriticalSection
GetLocalTime
WriteConsoleA
GetProcessId
LocalAlloc
CreateTapePartition
SetConsoleDisplayMode
GlobalGetAtomNameW
SetEnvironmentVariableA
GetModuleHandleA
CancelTimerQueueTimer
BuildCommDCBA
VirtualProtect
PeekConsoleInputA
WriteConsoleOutputAttribute
SetCalendarInfoA
FindFirstVolumeW
AreFileApisANSI
LCMapStringW
GetSystemDefaultLangID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
GetStartupInfoW
WriteFile
GetStdHandle
GetModuleFileNameA
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
VirtualAlloc
HeapReAlloc
GetCPInfo
GetOEMCP
IsValidCodePage
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
RealGetWindowClassA
AdjustTokenPrivileges
@GetAnotherVice@12
@SetFirstEverVice@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ