cvar
g_pCVar
Static task
static1
Behavioral task
behavioral1
Sample
731d883ac7b15af072f015e4f49ddcab.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
731d883ac7b15af072f015e4f49ddcab.dll
Resource
win10v2004-20231215-en
Target
731d883ac7b15af072f015e4f49ddcab
Size
704KB
MD5
731d883ac7b15af072f015e4f49ddcab
SHA1
72d4ea4a82887fc1141d9d457d905b180a743a8a
SHA256
2011ba11d5bfbec699863744e637bdb68a3da31bd8ca08f7d20c057f5065ad39
SHA512
c774efb0e53ec7c78d68be73b5bd2743db50b91342c533c46bfc7f3a83f19bb4872f92ff19358ec672a328229df6fe126430ed87fd0bac927e545f1eff5be9e3
SSDEEP
12288:ripUITj1BkaA1phW8JVPXf/83X2K4PeB9SxF0J+GAUeV1c+ai1nunXDcaezSXGEc:riCYxyB1rdHPP/wG1s9i05HeV10gn2I4
Checks for missing Authenticode signature.
resource |
---|
731d883ac7b15af072f015e4f49ddcab |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetAsyncKeyState
ShellExecuteA
Warning
KeyValuesSystem
cvar
g_pCVar
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE