@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
Static task
static1
Behavioral task
behavioral1
Sample
DosNuke.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
DosNuke.exe
Resource
win10v2004-20231215-en
Target
54ba43b63ac0728a151903c33403e948
Size
41KB
MD5
54ba43b63ac0728a151903c33403e948
SHA1
3407fcd9e3f321f0e43774077a51efa598cc70cc
SHA256
cc23f13a9504cd088e81f3ad792df50fb084dcf6f3b07167ff5ab4949ea89f6d
SHA512
5c253cb5ca0b3542aaeb47de8f7f2ef49f18ce31f877ee726f7e4c117d034b0964d570942012a290330c15e0258779d2cf7ad50a9283756a0d80eacae04b6932
SSDEEP
768:rOK/CneKiDp7ZzyyElNAwvze8lb3XEyuTWA2HLD0NxITAGbMNJMViYsUNB8:aK6EDdZ1/OrETWAMimctMS
Checks for missing Authenticode signature.
resource |
---|
unpack001/DosNuke.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CloseHandle
GetFileAttributesA
EnterCriticalSection
InitializeCriticalSection
GlobalMemoryStatus
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentThreadId
GetEnvironmentStrings
CreateFileA
GetFileType
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcAddress
GetStartupInfoA
GetStdHandle
ExitProcess
LeaveCriticalSection
Beep
GetCommandLineA
PeekConsoleInputA
RaiseException
ReadConsoleInputA
ReadFile
RtlUnwind
ScrollConsoleScreenBufferA
SetConsoleCtrlHandler
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetFilePointer
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteConsoleOutputA
WriteFile
GetVersion
socket
send
connect
closesocket
WSAStartup
WSACleanup
MessageBoxA
EnumThreadWindows
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ