_InitializeSystem@8
_SetFileData@8
_TerminateIO@4
Static task
static1
Behavioral task
behavioral1
Sample
b21ea326a441abe3277e3e7d7cf4f862.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b21ea326a441abe3277e3e7d7cf4f862.exe
Resource
win10v2004-20240226-en
Target
b21ea326a441abe3277e3e7d7cf4f862
Size
92KB
MD5
b21ea326a441abe3277e3e7d7cf4f862
SHA1
68cd3b1246ccb617108759397d63abaa2768a715
SHA256
77df2daf37f59b03f283ca2d977b37be67698bfb87f3e01f18d481a2f1907ccb
SHA512
4ffd56ecae4cb4d552a9097835b81bea2f70851937c1e7d3f981394600c8a03b79af1c974aebf01ff882af8983e8172c075e6748e910f92618139aa3bae9ee38
SSDEEP
1536:G371HdVm3RvEIXvdyr56Xks6YkHgbIUoF/KnjgulSusXzB+MiWJTIO5hv8gGaU16:M9dM3d1dgkUsJigbIUoFinjJPOTXfUgN
Checks for missing Authenticode signature.
Processes:
resource |
---|
b21ea326a441abe3277e3e7d7cf4f862 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ShellExecuteExA
DuplicateIcon
GdipAddPathStringI
GdipAddPathString
GdipNewPrivateFontCollection
GdipGetPathLastPoint
GdipAddPathLineI
GdipGetVisibleClipBoundsI
GdipCreateBitmapFromScan0
GdipAddPathPath
GdipTransformPath
GdipGetPathWorldBoundsI
GdipGetPathWorldBounds
GdipIsVisiblePointI
GdipNewInstalledFontCollection
ResetWriteWatch
CreateIoCompletionPort
GetSystemInfo
ReadFileEx
GetCommProperties
CopyFileA
GetFileType
CancelIo
PurgeComm
GetFileAttributesExW
GetFileInformationByHandle
HeapReAlloc
HeapAlloc
GetCommandLineA
FatalAppExitW
GetModuleHandleA
CloseHandle
HeapFree
GetModuleHandleExW
GlobalLock
LocalFlags
GetEnvironmentStrings
LocalShrink
IsProcessorFeaturePresent
GetWriteWatch
IsDBCSLeadByte
GlobalUnlock
GetProcAddress
GetWindowRgnBox
GetMessageW
PtInRect
SendMessageCallbackA
RegisterHotKey
GetScrollPos
UnregisterHotKey
BroadcastSystemMessageA
RedrawWindow
ScrollWindow
PeekMessageA
SetScrollPos
InvalidateRect
SetRect
ScrollDC
GetScrollRange
LogonUserA
RegOpenKeyA
QueryServiceConfigA
RegOpenKeyExW
RegConnectRegistryW
AbortSystemShutdownA
GetTokenInformation
SetThreadToken
OpenServiceA
_InitializeSystem@8
_SetFileData@8
_TerminateIO@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ