?bluewelukQvmHfiAtk@@YGPAKG@Z
?dywxcCawvwXizr@@YGPADPAD@Z
?mriqjzhhUtl@@YGPAKPAGJ@Z
?ddJjpVVofm@@YGMG@Z
?FhLYajbyomAMvOWXvLR@@YGDPAMPAF@Z
?lnLbdxNNhdNmvgzgWK@@YGFFD@Z
?ByDzUfgebWyiusxJiyE@@YGNIPAJ@Z
Static task
static1
Behavioral task
behavioral1
Sample
64c0631fc029628413a03717db472226.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64c0631fc029628413a03717db472226.exe
Resource
win10v2004-20231222-en
Target
64c0631fc029628413a03717db472226
Size
178KB
MD5
64c0631fc029628413a03717db472226
SHA1
b341d68d13ea4b9848161fce40b03ec8e07d29cc
SHA256
12590feaf9d3cf51140487a2de31c1c835395382338bb443814c236e870f82c1
SHA512
2ca39c23084e195eb24239da904d7d898fc78beec0addd94f0c46d9dfb3f904b15d2cd03ed65c78ddc2f060c6d891fe96b88381964ae16cceb8f885f7db4b668
SSDEEP
3072:ji5YzAge8sX0bf6RqkD2PLh/mBLiJiRJ1dYTT7Lt6YM:488Ef6RqU2PLoBLi0RJ1dYTfLkY
Checks for missing Authenticode signature.
resource |
---|
64c0631fc029628413a03717db472226 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateRoundRectRgn
EndDoc
GetTextMetricsW
LPtoDP
CreatePen
IntersectClipRect
CreateBitmap
CreateBrushIndirect
GetDIBits
VirtualQuery
TlsFree
GetTickCount
GetSystemDefaultLCID
lstrlenW
lstrcmpW
IsDBCSLeadByteEx
GetCompressedFileSizeW
GetModuleHandleW
GetProcAddress
SetThreadAffinityMask
HeapDestroy
GetMenuStringW
SetScrollPos
CharUpperW
GetKeyboardLayoutList
IsWindowUnicode
LoadCursorW
GetDlgItem
CreateMenu
ShowOwnedPopups
SendNotifyMessageW
GetProcessDefaultLayout
GetForegroundWindow
?bluewelukQvmHfiAtk@@YGPAKG@Z
?dywxcCawvwXizr@@YGPADPAD@Z
?mriqjzhhUtl@@YGPAKPAGJ@Z
?ddJjpVVofm@@YGMG@Z
?FhLYajbyomAMvOWXvLR@@YGDPAMPAF@Z
?lnLbdxNNhdNmvgzgWK@@YGFFD@Z
?ByDzUfgebWyiusxJiyE@@YGNIPAJ@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ