?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
Static task
static1
Behavioral task
behavioral1
Sample
4df27dd305e904bb3a49a278ce76e5b6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4df27dd305e904bb3a49a278ce76e5b6.exe
Resource
win10v2004-20231215-en
Target
4df27dd305e904bb3a49a278ce76e5b6
Size
186KB
MD5
4df27dd305e904bb3a49a278ce76e5b6
SHA1
e34741600553c68a7533d0e9cd818fb8199934eb
SHA256
b5342cf1af4bade147f2fd29b4c44cdcf3192bec5d3fb7dfb456806cf61ba0b5
SHA512
8127ba5e93f08fe0ff7a73f98ed68009a1f72295f41cd2ff1ec52f9b57fde6cf85d2a110b606eb1bc23c6dbbf655faf7807ae04900e2597dc4d0ed3c8b3e827d
SSDEEP
3072:C4SEMAmZZ7VZqUQRBE+PUswbIs46mc6VuEn813Rw5LlOEnzn6YBPpS8IkRcb:qjNVV4UUK+8swb0c6VudQky6KPNYb
Checks for missing Authenticode signature.
resource |
---|
4df27dd305e904bb3a49a278ce76e5b6 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrToIntA
PathStripPathW
LoadLibraryExA
GetModuleHandleA
lstrcmpA
?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ