@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
Static task
static1
Behavioral task
behavioral1
Sample
c134a64e1bd9de7c13fc3f97f58e5752.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c134a64e1bd9de7c13fc3f97f58e5752.exe
Resource
win10v2004-20240226-en
Target
c134a64e1bd9de7c13fc3f97f58e5752
Size
36KB
MD5
c134a64e1bd9de7c13fc3f97f58e5752
SHA1
c314296a03a94b3049769abb0d5f79d0f8905d95
SHA256
a1a158686a2877d6f2ffce956e41e66fcf83f693988305ba95026f257df4ab67
SHA512
42d547af466af1e0c6bdd82966b402155394b4de380870acce25b808e5b080e13dfeeeca40441cb89e27e16505a75cd31a3c0a2fb3be12c68207f6e1860cbe55
SSDEEP
384:LT3aQmFVsOqfjuEgrCSh1lWKKFigwSkxd0190T7xmCn1yssaFGzTorT1EGSF:LzSTq0mWKF2O190Tf1qwGzTg7
Checks for missing Authenticode signature.
resource |
---|
c134a64e1bd9de7c13fc3f97f58e5752 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetFileAttributesA
GetStdHandle
GetVersion
CloseHandle
GetCurrentThreadId
EnterCriticalSection
GetFileType
LeaveCriticalSection
GetCommandLineA
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetEnvironmentStrings
CreateFileA
InitializeCriticalSection
ExitProcess
GlobalMemoryStatus
GetLastError
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
Sleep
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
GetStartupInfoA
WSACleanup
socket
send
inet_ntoa
gethostbyname
connect
closesocket
WSAStartup
MessageBoxA
EnumThreadWindows
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ