fa
fc
Static task
static1
Behavioral task
behavioral1
Sample
7cc8d62b3905dc99d34dce225dafdeab.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7cc8d62b3905dc99d34dce225dafdeab.dll
Resource
win10v2004-20231222-en
Target
7cc8d62b3905dc99d34dce225dafdeab
Size
12KB
MD5
7cc8d62b3905dc99d34dce225dafdeab
SHA1
f893bc318b2b5b1d801ced7c66c6efc77c448ab3
SHA256
5967d73f1462072620823c097681f1acb29ff3fc157cab619610c1f94cdfdf6b
SHA512
2c7d672f50c68c8795789b50957b7e2c91a3dde914c1fb0b45e5942d9fdf161df74a70d71e6666cd24eeabfb92ee477198f40555f2893a10a990ffc510b1b4fd
SSDEEP
192:9QBa1k2tUA8v5UAQK2Ywl/NpfKGC42G3YO:f9WA8v5UAQKUll1C42G3Y
Checks for missing Authenticode signature.
resource |
---|
7cc8d62b3905dc99d34dce225dafdeab |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CallNextHookEx
SetWindowsHookExA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
_adjust_fdiv
malloc
_stricmp
_initterm
free
strcat
strrchr
??3@YAXPAX@Z
strcpy
??2@YAPAXI@Z
sprintf
strlen
strncpy
strchr
strstr
fclose
fread
fopen
memset
memcpy
strcmp
MultiByteToWideChar
Sleep
VirtualProtectEx
GlobalFree
ReadProcessMemory
WideCharToMultiByte
GlobalAlloc
IsBadReadPtr
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
CreateThread
GetModuleFileNameA
GlobalLock
GetCurrentProcess
fa
fc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ