??4_Init_locks@std@@QAEAAV01@ABV01@@Z
CoreGetShell
DawnUiGetShell
Static task
static1
Behavioral task
behavioral1
Sample
aa03d776b4f68c65cbbd1d447779caaee2d7d9459a1d06e735ff018229c44db9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
aa03d776b4f68c65cbbd1d447779caaee2d7d9459a1d06e735ff018229c44db9.exe
Resource
win10v2004-20231215-en
Target
aa03d776b4f68c65cbbd1d447779caaee2d7d9459a1d06e735ff018229c44db9
Size
4.6MB
MD5
df8e080a616552b8a8160abc41b81cd5
SHA1
7effc0c3920ced74301a84a2e985aa6d1aa80bcc
SHA256
aa03d776b4f68c65cbbd1d447779caaee2d7d9459a1d06e735ff018229c44db9
SHA512
ff0d62c41cc3f84981d2277b46e8ea0bdb08cc461bc6343aa0a753d76708c6e806a54b511c63fcb2daede1c8bb9bba34d1fd41af1aa8881d50245ff450b49e90
SSDEEP
98304:RwdLvTEvjBgcNGCnyMXtiGhsUCFFZgXJCnxSt6NQFSlQXxsGyVuVnJ:RwJbkGcN//tnO2XJdt6TlQWJVuVn
Checks for missing Authenticode signature.
resource |
---|
aa03d776b4f68c65cbbd1d447779caaee2d7d9459a1d06e735ff018229c44db9 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
CoreGetShell
DawnUiGetShell
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE