__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
eb58aaa1b5523867d03f1f96c2e3dc7065977c6568e5814213cb31c82e917e81.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
eb58aaa1b5523867d03f1f96c2e3dc7065977c6568e5814213cb31c82e917e81.exe
Resource
win10v2004-20240226-en
Target
eb58aaa1b5523867d03f1f96c2e3dc7065977c6568e5814213cb31c82e917e81
Size
73KB
MD5
2494f15ee08d24c05a41e67573574376
SHA1
88a6c608aeb2c95a7ea34fced08068e12a3ce9a8
SHA256
eb58aaa1b5523867d03f1f96c2e3dc7065977c6568e5814213cb31c82e917e81
SHA512
6a5c85aa170a50f13775981a0f4eb942d9f4e2f9e4dd9df63e846d5b010f31b4853ee450e25d3029202b5b0616a42f7bfdb5e2a8d0986e173e5ccfc95620f60f
SSDEEP
1536:hbHb02kWimRWgjimu0K5QPqfhVWbdsmA+RjPFLC+e5h00ZGUGf2g:hTbbUgjxu0NPqfcxA+HFsh0Og
Checks for missing Authenticode signature.
resource |
---|
eb58aaa1b5523867d03f1f96c2e3dc7065977c6568e5814213cb31c82e917e81 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ