?goObyxpEipjzhmyWIvn@@YGPAGPAE@Z
?zHrWwgvyOvO@@YGPADPAN@Z
?lVyxtVvuAilnV@@YGFDPAD@Z
?nuuewmabOmrDgJokBqUHz@@YGJPAK@Z
?whLvwkxfoh@@YGHPANE@Z
?njdnHGsnrBJluoYfne@@YGXPAEPAE@Z
?IUjgzaecwikl@@YGFPAEPAD@Z
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-00971afbfc3a6771ecb644eb2252caad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-00971afbfc3a6771ecb644eb2252caad.exe
Resource
win10v2004-20231215-en
Target
VirusShare-00971afbfc3a6771ecb644eb2252caad
Size
30KB
MD5
00971afbfc3a6771ecb644eb2252caad
SHA1
408c5444beead9025910576924ae595ebe4f692f
SHA256
a4937b7f9f3096c0b0f85ce1b39ee9aced867e3ca70c8ae00b94927bb665ae51
SHA512
6c34374b050aa2cc43be01e25455be30341a93bf9ee9d8073ea31aa08b37f26e4040bdcae963c5eac7161d6e8e5c033ffd0be01d50a7ed092d33f42a23d7afc3
SSDEEP
384:BPwydd/LJYXif+9uC+cB97dXMUMnpLcYF2Ut8TIpnRecnZlb3cinCek:7dAxgm7dcjnpLZ2Ut/BZlbG
Checks for missing Authenticode signature.
resource |
---|
VirusShare-00971afbfc3a6771ecb644eb2252caad |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GlobalFindAtomW
GetSystemTimeAsFileTime
lstrlenA
GetFileInformationByHandle
GetShortPathNameA
VerifyVersionInfoW
lstrcatW
GetOverlappedResult
CreateNamedPipeA
RemoveDirectoryA
FormatMessageA
SetEvent
SetPriorityClass
PathAddBackslashA
ReplaceTextW
PrintDlgW
StartDocW
RoundRect
Polygon
PathToRegion
SetViewportExtEx
TextOutA
GetCursorPos
DrawFrameControl
InvalidateRect
ModifyMenuW
GetWindowRect
GetLastActivePopup
CreatePopupMenu
GetActiveWindow
wsprintfA
LoadStringA
UnloadKeyboardLayout
GetMonitorInfoW
LoadAcceleratorsA
?goObyxpEipjzhmyWIvn@@YGPAGPAE@Z
?zHrWwgvyOvO@@YGPADPAN@Z
?lVyxtVvuAilnV@@YGFDPAD@Z
?nuuewmabOmrDgJokBqUHz@@YGJPAK@Z
?whLvwkxfoh@@YGHPANE@Z
?njdnHGsnrBJluoYfne@@YGXPAEPAE@Z
?IUjgzaecwikl@@YGFPAEPAD@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ