JgCPCloseART
JgCPIdentifyART
JgCPImageART
JgCPInputART
JgCPMaskART
JgCPOpenART
JgCPPaletteART
JgCPQueryART
JgCPReportART
JgCPSetCallbackART
JgCPSetEOFART
JgCPShutDownART
JgCPStartUpART
JgCPVxDHeartBeatART
jgcpDrvDeRegisterTask
Static task
static1
Behavioral task
behavioral1
Sample
c4a8683b1e424cfbb23eb8249b341617.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c4a8683b1e424cfbb23eb8249b341617.dll
Resource
win10v2004-20240226-en
Target
c4a8683b1e424cfbb23eb8249b341617
Size
179KB
MD5
c4a8683b1e424cfbb23eb8249b341617
SHA1
2474eb00dd490a842e8684bf6474a403b2f1b01f
SHA256
b7272f0bed8916d943d0ff6445e0db59aaa094a6eb6067499d66ca1ee913992b
SHA512
cb4472eed3fd9d920dfd3443bce0c319c0143429cbd6bca4506f34cb4e8cad14a05c4dcd8285ce315d5f3ebfb5277cded2ad89004cc4b9d97f0de139888442d5
SSDEEP
3072:ybMqIjLMR9xSjNSKm3D5eIy9o8tUn5LkE3uicIIG3iF3I146WZha:ybMqIjKxfK9LZUpiInUT
Checks for missing Authenticode signature.
resource |
---|
c4a8683b1e424cfbb23eb8249b341617 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord7
ord6
JgstmFindARTSegment
JgpIDecGetReport
JgpIDecSetEOF
JgpIDecQuery
JgpIDecGetMask
JgpIDecGetImage
JgpIDecInput
JgpIDecOpenContext
JgpIDecOpenDecoder
JgpIDecCloseDecoder
JgpIDecGetPalette
JgpIDecCloseContext
LoadLibraryA
FreeLibrary
GetProcAddress
malloc
_adjust_fdiv
_initterm
free
JgCPCloseART
JgCPIdentifyART
JgCPImageART
JgCPInputART
JgCPMaskART
JgCPOpenART
JgCPPaletteART
JgCPQueryART
JgCPReportART
JgCPSetCallbackART
JgCPSetEOFART
JgCPShutDownART
JgCPStartUpART
JgCPVxDHeartBeatART
jgcpDrvDeRegisterTask
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ