Albus
Candies
OneMore
Robin
Static task
static1
Behavioral task
behavioral1
Sample
9cf4b83688dd5035623182d6a895c61e1e71ea02dc3e474111810f6641df1d69.exe
Resource
win7-20231129-en
Target
9cf4b83688dd5035623182d6a895c61e1e71ea02dc3e474111810f6641df1d69
Size
293KB
MD5
572fdac6723a4031febc449795f51df5
SHA1
fdf8662e68a5dfc900cec85fa509ac392471e856
SHA256
9cf4b83688dd5035623182d6a895c61e1e71ea02dc3e474111810f6641df1d69
SHA512
c62563eda61cafd5705f6f2fadbf0fc0a79837d1811305403ea774eddda6617bf0853c0f9b2d96dcd8ae5ae3d27a913b17939bd3b09784a07e236e7ef8a61888
SSDEEP
6144:SQ9vt04i5QLALxkRXAPmgNbCkq+lsbrfyLC:SaO4i5lFwAPmgN2nRram
Checks for missing Authenticode signature.
Processes:
resource |
---|
9cf4b83688dd5035623182d6a895c61e1e71ea02dc3e474111810f6641df1d69 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WriteConsoleOutputCharacterW
FindResourceExW
LoadResource
SetWaitableTimer
GetCurrentProcess
InitializeSListHead
HeapFree
GetModuleHandleExW
GlobalLock
CancelWaitableTimer
UnlockFile
SetTapeParameters
GetModuleHandleW
GetCompressedFileSizeW
TzSpecificLocalTimeToSystemTime
GlobalFindAtomA
GetLocaleInfoW
GetSystemTimeAdjustment
GetFileAttributesW
OpenFile
GetEnvironmentVariableA
CompareStringW
DisconnectNamedPipe
GetConsoleAliasesW
SetLastError
GetProcAddress
EnumDateFormatsExA
GetLocalTime
GetAtomNameA
LocalAlloc
VirtualLock
AddAtomA
GlobalWire
lstrcatW
FatalExit
GetFileTime
EnumCalendarInfoExA
LocalFree
LCMapStringW
RemoveVectoredExceptionHandler
GetTimeZoneInformation
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetLastError
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
Sleep
ExitProcess
SetConsoleCtrlHandler
WriteFile
GetStdHandle
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CloseHandle
CreateFileA
HeapSize
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
ReadFile
SetEndOfFile
GetProcessHeap
CompareStringA
SetEnvironmentVariableA
GetModuleHandleA
RegCreateKeyW
GetPrivateObjectSecurity
Albus
Candies
OneMore
Robin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ