IsProcessExW@16
EnumKeyboardEx@8
DeleteListItemOriginal@8
Static task
static1
Behavioral task
behavioral1
Sample
b82cee0cdcd3892ea6e09c13e68e2b77.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b82cee0cdcd3892ea6e09c13e68e2b77.exe
Resource
win10v2004-20240226-en
Target
b82cee0cdcd3892ea6e09c13e68e2b77
Size
197KB
MD5
b82cee0cdcd3892ea6e09c13e68e2b77
SHA1
50b84b28e194002aeb0a3e0a75b89f410059c90a
SHA256
35b0912e8c1dc16dedd841240318cefcd3741c7b2c0e4127a011226672e96b98
SHA512
1c0c9d5ec875f51f811df721a90c53f76419297e424c38e7285a0774dab2c8012588743bc82d818ea9ebfca8345834f432621b6eeb4cb85d365b4fa5a6bfa4ec
SSDEEP
3072:9jok7IkAImAvhmprD4bhZCE+BcSkJyIhA3Mbe6vUpDRA2FNq5e+nYby3:9MyIkTNvspK+mx7hA8WpeXnYby
Checks for missing Authenticode signature.
resource |
---|
b82cee0cdcd3892ea6e09c13e68e2b77 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsProcessExW@16
EnumKeyboardEx@8
DeleteListItemOriginal@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ