Gorgeous
Robinson
SeeYou
Static task
static1
Behavioral task
behavioral1
Sample
187e0a02620b7775c2a8f88d5b27e80b5d419ad156afc50ef217a95547d0feaa.exe
Resource
win7-20240221-en
Target
187e0a02620b7775c2a8f88d5b27e80b5d419ad156afc50ef217a95547d0feaa
Size
649KB
MD5
a7eb8d7b83e5fd622c1e205c911a110a
SHA1
c685312922a40d841e583f9399f66d35d6ccfb46
SHA256
187e0a02620b7775c2a8f88d5b27e80b5d419ad156afc50ef217a95547d0feaa
SHA512
74491263adde3ff2eaa49394155e31d5b693bf1534d926580e804ad92f314801c696a2cdf0645c957ba666352dea21a2a97aaa0144866f95f1cf85a85d836980
SSDEEP
12288:utr6/CnX8yXPD3N1tH1epcuSdCusLqqcYourJqeK2xGn:uUSjXPD3N1y9SsJqrur8ezGn
Checks for missing Authenticode signature.
Processes:
resource |
---|
187e0a02620b7775c2a8f88d5b27e80b5d419ad156afc50ef217a95547d0feaa |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapAlloc
SetWaitableTimer
HeapFree
GetModuleHandleExW
LockFile
ConnectNamedPipe
GetCompressedFileSizeW
FindResourceExA
GlobalAlloc
GetLocaleInfoW
SizeofResource
GetSystemTimeAdjustment
InterlockedPopEntrySList
GetExitCodeProcess
GetFileAttributesW
GetAtomNameW
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GlobalUnlock
VirtualUnlock
GetConsoleAliasesW
OpenWaitableTimerW
AddVectoredExceptionHandler
AddAtomW
GetTapeParameters
GlobalFindAtomW
GlobalWire
VirtualProtect
GetFileTime
GetCurrentProcessId
EnumCalendarInfoExA
LocalFree
LocalFileTimeToFileTime
CompareStringW
CompareStringA
WriteConsoleOutputCharacterA
GetEnvironmentVariableA
EnumDateFormatsExW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwind
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
MultiByteToWideChar
CloseHandle
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapSize
FlushFileBuffers
ReadFile
SetEndOfFile
GetProcessHeap
SetEnvironmentVariableA
GetProcessDefaultLayout
AddAccessDeniedAce
IsValidSid
Gorgeous
Robinson
SeeYou
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ