LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Static task
static1
Behavioral task
behavioral1
Sample
b0f2b6ac9dfed9c7945cb36610b470dd0be63d85c150f6eba8b0720345bea32d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b0f2b6ac9dfed9c7945cb36610b470dd0be63d85c150f6eba8b0720345bea32d.exe
Resource
win10v2004-20231222-en
Target
b0f2b6ac9dfed9c7945cb36610b470dd0be63d85c150f6eba8b0720345bea32d
Size
1.1MB
MD5
2cbb85eb8b7c72d5a87a5d1dbafd810d
SHA1
00ced3fb6daf4e116c97df90bc44a2c8e49c6a84
SHA256
b0f2b6ac9dfed9c7945cb36610b470dd0be63d85c150f6eba8b0720345bea32d
SHA512
8dd1332d07ba5c81cc63213e6ad435cdd23295710dae0deef76f2adeb6e726bac73a59cfb6620909239b1541948c832db394e0409a8c4e6eba95d8db18cbc83c
SSDEEP
24576:Uajr9I/jWHQQ4nZdGwgckqdM4T6vTD0MNqdp2v8QT/ao4:DxQfddZP2y6/BNqdp2vVr
Checks for missing Authenticode signature.
resource |
---|
b0f2b6ac9dfed9c7945cb36610b470dd0be63d85c150f6eba8b0720345bea32d |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE