Gorgeous
Probka
Static task
static1
Behavioral task
behavioral1
Sample
9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff.exe
Resource
win7-20231129-en
Target
9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff
Size
695KB
MD5
a718ba0edee0b2108aad0ce0fd7fdd0f
SHA1
711b27ab368a13ccda3c279a8645a77c8e9fbf4e
SHA256
9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff
SHA512
d4f9ed746f1b4faccc121c6faf74a5672222832b555265038c307076211bc93a46a7d800bbbd141ad2c1d879e6b614f134e72814d641c205ed5f5f3293fc7646
SSDEEP
12288:uKLajISPIPc5s2RElpKDHMbGiwdGLlVk+ZrIwI0c+kmkuC08:TKIYre2RESTMbGhdGkwomkuC08
Checks for missing Authenticode signature.
resource |
---|
9917c962b7e0a36592c4740d193adbd31bc1eae748d2b441e77817d648487cff |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RemoveVectoredExceptionHandler
FindResourceA
GetModuleHandleExA
FindResourceExW
WriteConsoleOutputCharacterA
LoadResource
SystemTimeToTzSpecificLocalTime
SetWaitableTimer
InterlockedIncrement
SetConsoleTextAttribute
GetCurrentProcess
ConnectNamedPipe
SetFileTime
GetCompressedFileSizeW
GlobalFindAtomA
GetLocaleInfoW
GetSystemTimeAdjustment
GetFileAttributesA
GetExitCodeProcess
SetTimeZoneInformation
TerminateProcess
GetAtomNameW
FileTimeToSystemTime
lstrcatA
GetEnvironmentVariableA
GlobalUnlock
SetLastError
OpenWaitableTimerW
LocalAlloc
SetConsoleOutputCP
AddAtomA
GetTapeParameters
GlobalWire
VirtualProtect
LocalFree
SetFileAttributesW
SetEnvironmentVariableA
CompareStringW
GetStartupInfoW
RaiseException
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FatalAppExitA
VirtualAlloc
HeapReAlloc
HeapSize
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileA
CloseHandle
FlushFileBuffers
GetTimeZoneInformation
CompareStringA
GetModuleHandleA
GetMonitorInfoA
Gorgeous
Probka
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ