fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
495cb4d1b9371e10649d9c5fa5fa4f6a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
495cb4d1b9371e10649d9c5fa5fa4f6a.dll
Resource
win10v2004-20231215-en
Target
495cb4d1b9371e10649d9c5fa5fa4f6a
Size
16KB
MD5
495cb4d1b9371e10649d9c5fa5fa4f6a
SHA1
8d5d7f1e4ef2fdd067325f413a5a51aed2bbabfe
SHA256
9e15957c2d5db709e334993d92501d592b5aa0d5b756a6e3a4a47dde8ccf3046
SHA512
78be0ac192953c28c28ca5a9391e33e671eca904b20056709e65b8e4bbcd955395e8e0a9ca56cd9a84c3809d373fbbc1d7ac6d440e57d66c4bfe2f5815f3d64a
SSDEEP
384:5sDBvkb1Asp8zB/cxR7uuLacCKZFHRSdjYw9:yvAR7uuWcC2xS
Checks for missing Authenticode signature.
resource |
---|
495cb4d1b9371e10649d9c5fa5fa4f6a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IsBadReadPtr
CreateThread
VirtualProtectEx
GetCurrentProcess
GetModuleFileNameA
Sleep
GetCommandLineA
GlobalFree
GetProcAddress
GetModuleHandleA
ReadProcessMemory
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
GetKeyboardState
CallNextHookEx
GetAsyncKeyState
ToAscii
SetWindowsHookExA
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
_adjust_fdiv
malloc
_initterm
free
_stricmp
memset
strlen
strstr
memcpy
strrchr
strcpy
strcmp
strcat
sprintf
??2@YAPAXI@Z
strncpy
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ