??0CdaStash@@QAE@XZ
??1CdaStash@@UAE@XZ
??_7CdaStash@@6B@
?Push@CdaStash@@QAEJIIJ@Z
?PushTick@CdaStash@@IAEJIIJ@Z
?PushTickList@CdaStash@@IAEJIIJ@Z
?Retrive@CdaStash@@QAEHAAI0JPAH@Z
Static task
static1
Behavioral task
behavioral1
Sample
d313b3a32a87d8fdcd1038ca320b8eff037463e3c596d56dfef4bf17641cc517.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d313b3a32a87d8fdcd1038ca320b8eff037463e3c596d56dfef4bf17641cc517.dll
Resource
win10v2004-20231215-en
Target
d313b3a32a87d8fdcd1038ca320b8eff037463e3c596d56dfef4bf17641cc517
Size
40KB
MD5
bcb70606c42473900ffd9d26dd815925
SHA1
9fe1a9b8f1bec532f5db83e9502cfcd2061f01cc
SHA256
d313b3a32a87d8fdcd1038ca320b8eff037463e3c596d56dfef4bf17641cc517
SHA512
f8bc45b890b87ce4bcb2a401e68e2c41f378909853ce03045fe3525b6d96302abb59b8db9acb44cad17045becd608998dcd23fda71684c316a5586d485f2984f
SSDEEP
192:FtuE9LyaFyxKbNkv2L7hITiYbV6oI2KmdrcaP+gMuehI:FtL9Wa2w19YbVRIQrzmg0I
Checks for missing Authenticode signature.
resource |
---|
d313b3a32a87d8fdcd1038ca320b8eff037463e3c596d56dfef4bf17641cc517 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord1168
ord1253
ord342
ord823
ord1182
ord825
ord699
ord772
ord397
ord500
ord800
ord912
ord538
ord5606
ord5860
ord4188
ord3663
ord2393
ord5440
ord6383
ord5450
ord6394
ord6142
__CxxFrameHandler
_purecall
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
??0CdaStash@@QAE@XZ
??1CdaStash@@UAE@XZ
??_7CdaStash@@6B@
?Push@CdaStash@@QAEJIIJ@Z
?PushTick@CdaStash@@IAEJIIJ@Z
?PushTickList@CdaStash@@IAEJIIJ@Z
?Retrive@CdaStash@@QAEHAAI0JPAH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ