Cruso
Gorgeous
SeeYou
Static task
static1
Behavioral task
behavioral1
Sample
707971879e65cbd70fd371ae76767d3a7bff028b56204ca64f27e93609c8c473.exe
Resource
win7-20240221-en
Target
707971879e65cbd70fd371ae76767d3a7bff028b56204ca64f27e93609c8c473
Size
728KB
MD5
2124d2e449117ecbc66c3e67e3ed289c
SHA1
5455fb1f943ec04431c69857806de4a7a0625eb3
SHA256
707971879e65cbd70fd371ae76767d3a7bff028b56204ca64f27e93609c8c473
SHA512
3af0af3136fc4e0dc8558fdce4de0faf8c0b15e78ee96df1c0b2903b5d8bfcc717c1cdd20f5fd15f375651b3c22289b621192cd4dc9973e8c173a661011c718c
SSDEEP
12288:Sf26fr9vINi7CaxdAiaKVBVLXidyJoHAPCzBegCIiZlV0CSnfAsD7Q/voA:StJvIIFKU3MA2A6zINPVzSfWoA
Checks for missing Authenticode signature.
resource |
---|
707971879e65cbd70fd371ae76767d3a7bff028b56204ca64f27e93609c8c473 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExitProcess
RemoveVectoredExceptionHandler
FindResourceA
WriteConsoleOutputCharacterA
SystemTimeToTzSpecificLocalTime
SetWaitableTimer
HeapFree
GetModuleHandleExW
LockFile
SetTapeParameters
GetCompressedFileSizeW
FindResourceExA
GetLocaleInfoW
SizeofResource
SetSystemTimeAdjustment
GetFileAttributesA
GetExitCodeProcess
GetAtomNameW
GetTimeZoneInformation
GetEnvironmentVariableA
GlobalUnlock
DisconnectNamedPipe
VirtualUnlock
GetConsoleAliasesW
SetLastError
OpenWaitableTimerW
LocalAlloc
SetConsoleCtrlHandler
SetConsoleOutputCP
AddAtomA
GlobalFindAtomW
GlobalUnWire
lstrcatW
VirtualProtect
GetFileTime
GetCurrentProcessId
LocalFree
SetFileAttributesW
LocalFileTimeToFileTime
SetEnvironmentVariableA
CompareStringW
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
FreeLibrary
InterlockedExchange
LoadLibraryA
MultiByteToWideChar
CloseHandle
CreateFileA
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
ReadFile
SetEndOfFile
GetProcessHeap
CompareStringA
GetModuleHandleA
GetMonitorInfoA
Cruso
Gorgeous
SeeYou
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ