?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
Static task
static1
Behavioral task
behavioral1
Sample
b74f9bb7e2af883b34f527c0e0f1663b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b74f9bb7e2af883b34f527c0e0f1663b.exe
Resource
win10v2004-20240226-en
Target
b74f9bb7e2af883b34f527c0e0f1663b
Size
147KB
MD5
b74f9bb7e2af883b34f527c0e0f1663b
SHA1
59859ef3eaac6db72d118f5eb8e5f855c5f1760e
SHA256
1a7b1854b220cf6b6b0938d3e8976b4c6dba14cc85e7858cfa8c924e4fb56ea6
SHA512
abb4b926918206137f91898c91abee7b58e4a37d80a744aa7a955cc2e4e4b25bd5c96d00cf5ed08895be001e8094fc4eaa7e8d7a45ef1f632eb0af7ee5e93e6d
SSDEEP
3072:HVxMAmeBZ7B4PUNAA5a2t/VG8Ny865wc8SRH710sVL3X:1KCBVSEAA42tM8k8zoH7WW3X
Checks for missing Authenticode signature.
resource |
---|
b74f9bb7e2af883b34f527c0e0f1663b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrToIntA
PathStripPathW
GetModuleHandleA
lstrcmpA
LoadLibraryExA
?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ