ReflectiveLoader
VoidFunc
Static task
static1
Behavioral task
behavioral1
Sample
151d7008edac758ba7abc7236d3b5a0e4b5170f8b49fb4b1796acfa5118b5030exe.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
151d7008edac758ba7abc7236d3b5a0e4b5170f8b49fb4b1796acfa5118b5030exe.dll
Resource
win10v2004-20231215-en
Target
151d7008edac758ba7abc7236d3b5a0e4b5170f8b49fb4b1796acfa5118b5030exe.exe
Size
649KB
MD5
1f1d07d867e9e2b394f49a44f074a84e
SHA1
3762b4e52ffa86a903fc9c86ef20b53d644a93b0
SHA256
151d7008edac758ba7abc7236d3b5a0e4b5170f8b49fb4b1796acfa5118b5030
SHA512
ce7ac02d953037bc9c20a8250dd38e106bb64973e5ff9ca5516fcae8f286a37c7bd1bcc25ff4fe8d701d20c590222f33372b933b97cdfc341c54d453490ed09e
SSDEEP
6144:zOeEO602QcpwZZUIQfEeVyDf0x7/Ga0sxp4ycY1dA:6RpDPpwZNQM2rG6cci
Checks for missing Authenticode signature.
resource |
---|
151d7008edac758ba7abc7236d3b5a0e4b5170f8b49fb4b1796acfa5118b5030exe.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetCurrentProcess
WriteProcessMemory
GetProcAddress
LoadLibraryW
OutputDebugStringW
WriteConsoleW
CreateFileW
ReadConsoleW
ReadFile
CloseHandle
HeapReAlloc
HeapSize
GetStringTypeW
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
GetCurrentThreadId
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
LocalFree
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
GetCurrentThread
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
FlushFileBuffers
WriteFile
RtlUnwind
SetErrorInfo
VariantClear
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
CreateErrorInfo
SafeArrayLock
SafeArrayDestroy
SafeArrayCreate
SysFreeString
SysAllocString
SafeArrayUnlock
GetErrorInfo
VariantChangeType
CLRCreateInstance
ReflectiveLoader
VoidFunc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ