__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
7f2c2a0e6579c028f898e4fb0a8a3612.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7f2c2a0e6579c028f898e4fb0a8a3612.exe
Resource
win10v2004-20231215-en
Target
7f2c2a0e6579c028f898e4fb0a8a3612
Size
494KB
MD5
7f2c2a0e6579c028f898e4fb0a8a3612
SHA1
f2efc106cdaadb27c5c72ccf6b9715ea1efe7e68
SHA256
8b71d33ade796e36262c0844b0fe2954f66d1a7db2fb4988669448e77d10a69a
SHA512
7f280a69a005816e4fda3205c18b7578d24b66ca4e0e7e96e54fa1b41ec84b0b2c6c7b6850afe5fd1c2f963ccdbabfe8c10c5a3f153a4e08e1c1f718e3459e24
SSDEEP
6144:IuaYeBGrKAA8DutTX6rW3hMAlQvBywCxRdkjzfZ/Jif6QQuF1watY2R:pmADDu9KrW3hMAlQEKW6QfCaP
Checks for missing Authenticode signature.
resource |
---|
7f2c2a0e6579c028f898e4fb0a8a3612 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CreateFileA
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindResourceA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetThreadContext
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
RaiseException
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
SizeofResource
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtectEx
VirtualQuery
WriteFile
WriteProcessMemory
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ