_CloseDrive@8
_NewDevice@8
_RefreshWindow@4
Static task
static1
Behavioral task
behavioral1
Sample
9c09776c55bc2d23a6cfc3bb35a29011.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c09776c55bc2d23a6cfc3bb35a29011.exe
Resource
win10v2004-20231222-en
Target
9c09776c55bc2d23a6cfc3bb35a29011
Size
91KB
MD5
9c09776c55bc2d23a6cfc3bb35a29011
SHA1
ba4e2d35579be6dd379cfe41ff21c3d1b8e4889b
SHA256
27ba63b6c311154f69b658abcaae37badc32e3860c9c963f25e282749efe1aa8
SHA512
58db52a0d62a298f1648da8b02659ebef3d806ae9e8b34862bbdab7b03af1983b6276d406ae152cb22564a9bb326e4fd404b0f948d8c1e530bc8c131a7c3266d
SSDEEP
1536:tE83anji+6CmVIt8EpFRy4dXUkYtGemVPZyV2j4cFj+tkyfYR0:CjO+3miyE7gKBYYemVhyV2kcFj+tk2G0
Checks for missing Authenticode signature.
Processes:
resource |
---|
9c09776c55bc2d23a6cfc3bb35a29011 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ShellExecuteW
ShellAboutW
GdipAddPathRectangle
GdipIsVisiblePoint
GdipGetVisibleClipBounds
GdipNewPrivateFontCollection
GdipAddPathRectangles
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromFileICM
GdipIsClipEmpty
GdipAddPathClosedCurve
GdipWidenPath
GdipAddPathCurve3
GdipAddPathClosedCurve2
GdipReversePath
GdipNewInstalledFontCollection
GlobalReAlloc
LocalSize
FatalExit
GlobalHandle
GlobalMemoryStatusEx
VirtualAllocEx
SetupComm
GlobalDeleteAtom
WaitNamedPipeA
GetLogicalDrives
GetFileAttributesA
CopyFileA
GetCommMask
HeapReAlloc
HeapAlloc
GetModuleHandleExW
CloseHandle
LocalUnlock
GlobalFix
GetNativeSystemInfo
SetLocalTime
HeapFree
SignalObjectAndWait
VirtualFreeEx
GetOverlappedResult
GetCPInfoExW
GetProcAddress
GetWindowRgnBox
GetMessageW
LockWindowUpdate
InvalidateRect
GetMessagePos
GetMessageTime
ValidateRect
RegisterHotKey
SetMessageQueue
ExcludeUpdateRgn
UnregisterHotKey
ValidateRgn
RedrawWindow
ScrollWindow
InitiateSystemShutdownW
RegConnectRegistryA
RegNotifyChangeKeyValue
RevertToSelf
RegOpenKeyExA
OpenServiceW
GetUserNameW
OpenSCManagerW
OpenThreadToken
_CloseDrive@8
_NewDevice@8
_RefreshWindow@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ