??0CVdsStructuredExceptionTranslator@@QAE@XZ
??1CVdsDebugLog@@QAE@XZ
??1CVdsStructuredExceptionTranslator@@QAE@XZ
?TracingLogEnabled@CVdsDebugLog@@QAEHXZ
Static task
static1
Behavioral task
behavioral1
Sample
74ff0171eb8037cf1193c07a6bfb4cd0.exe
Resource
win7-20231215-en
Target
74ff0171eb8037cf1193c07a6bfb4cd0
Size
87KB
MD5
74ff0171eb8037cf1193c07a6bfb4cd0
SHA1
68c885c9e51e138d35d536ccb260fc1afb780ad6
SHA256
527dc90ceedf89e8be081f87195ed10070276de7252d1ade7ed1a5014f6a979c
SHA512
bcbec74620e3d7527c22134c1e94531fdbfa3a54e788262dd6ab40b3e50d77c6e838f8e2ef4ef26b356ddb2f97b6edf40e0069a59f93dc25846b089da63f4a74
SSDEEP
1536:bA0eQaeIndIaHnOATGUEHkPNrvndq6/NUneOaYP8a/8shS0Tyqwa:k0eQInlHOATSHk9dqzeO3P8aUH0TUa
Checks for missing Authenticode signature.
Processes:
resource |
---|
74ff0171eb8037cf1193c07a6bfb4cd0 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_XcptFilter
_exit
_c_exit
??2@YAPAXI@Z
_purecall
_except_handler3
??3@YAXPAX@Z
__CxxFrameHandler
__set_app_type
_controlfp
_cexit
ord20
ord17
ord23
ord21
ord16
ord32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineW
GetCurrentThreadId
Sleep
CreateEventW
TerminateProcess
SetEvent
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
CloseHandle
HeapFree
GetProcessHeap
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
CreateThread
InterlockedIncrement
DispatchMessageW
PostThreadMessageW
GetMessageW
CoSuspendClassObjects
CoUninitialize
CoResumeClassObjects
CoInitializeSecurity
CoInitializeEx
CoCreateInstanceEx
??1CVdsCallTracer@@QAE@XZ
??0CVdsCallTracer@@QAE@KPBD@Z
?IsLocalComputer@@YGJPAG@Z
?VdsSeTranslator@CVdsStructuredExceptionTranslator@@SGXIPAU_EXCEPTION_POINTERS@@@Z
??0CVdsStructuredExceptionTranslator@@QAE@XZ
??1CVdsDebugLog@@QAE@XZ
??1CVdsStructuredExceptionTranslator@@QAE@XZ
?TracingLogEnabled@CVdsDebugLog@@QAEHXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE