?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
Static task
static1
Behavioral task
behavioral1
Sample
66dc17d9f02e0d4771eeb28393948f68.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66dc17d9f02e0d4771eeb28393948f68.exe
Resource
win10v2004-20231215-en
Target
66dc17d9f02e0d4771eeb28393948f68
Size
186KB
MD5
66dc17d9f02e0d4771eeb28393948f68
SHA1
c39da366bb25dcf7950116dd53004fd1bdf8c0a7
SHA256
8a6d5601370af43f8fb91acbe597dd0e341eafd9b9dc0fac1824741dd25a704b
SHA512
51355a9fc36da7503d03a02af53830be0391ff1c1206d3f5c92fdf5b0726358420217733ca68f20c824331ebff8124fed2858edc20f342fbfee1e697b178530e
SSDEEP
3072:C4SEMAmZZ7JbqUQRBE+PUswbIs46mc6VuEn813Rw5LlOEnzn6YBPpS8IkRcb:qjNVJOUUK+8swb0c6VudQky6KPNYb
Checks for missing Authenticode signature.
resource |
---|
66dc17d9f02e0d4771eeb28393948f68 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrToIntA
PathStripPathW
LoadLibraryExA
GetModuleHandleA
lstrcmpA
?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ