GetCasual
?ZeroPointW@@YG_JU_tagSTACKFRAME64@@P6GPAXPAX_K@Z@Z
Static task
static1
Behavioral task
behavioral1
Sample
eaf754f52c3e7a9a794c4ed6b7a8489f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
eaf754f52c3e7a9a794c4ed6b7a8489f.exe
Resource
win10v2004-20231215-en
Target
eaf754f52c3e7a9a794c4ed6b7a8489f.exe
Size
79KB
MD5
eaf754f52c3e7a9a794c4ed6b7a8489f
SHA1
1f74aa7a5ae772e5f2b47c9fe5742588fe7952b3
SHA256
3facbd3516b3a52657e0a5f0ea0d54239a916998833e088d68ecd69d61e5b119
SHA512
6772ff948b7da99225fa2b90c00d5cf44185fe8dd0d7240193126e3155719228a5eb641338c7a16349859d8907fb363152a8f36f11c59172f09983f90de4fd62
SSDEEP
1536:Xqfr/z1ih6/nDTJJNds1vV5zgfuVGXzQaQJ1LStIC5AWZvhc4y:XqTL1s6/DTJJPs9V5zPVGXzvmoIC5Xh
Checks for missing Authenticode signature.
resource |
---|
eaf754f52c3e7a9a794c4ed6b7a8489f.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PathRemoveArgsW
lstrlenA
GetCasual
?ZeroPointW@@YG_JU_tagSTACKFRAME64@@P6GPAXPAX_K@Z@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ