Batman
Candies
Fobos
OneMore
Static task
static1
Behavioral task
behavioral1
Sample
b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42.exe
Resource
win7-20240221-en
Target
b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42
Size
269KB
MD5
e640bdb76d7b30cb9ca9250d5b6631e3
SHA1
0540792efa9eb7ecdcfce3340dc0be1204c1e8c8
SHA256
b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42
SHA512
0d9bbc8f82a212cbb92595f2d5e7e4e1bab00061286f04441dce4c383827e3d55a60afee4e1d52b2af4ded201c5c54c046a4065ca055cfa1448b807a4a4a2034
SSDEEP
3072:HWFdp+IajKk//6uu3icJ3QJiLK4DBOigIjbeirMnUMdE5R+l:2FdpH4KVd3bneIjbekMn9
Checks for missing Authenticode signature.
Processes:
resource |
---|
b1af67bcfaa99c369960580f86e7c1a42fc473dd85a0a4d3b1c989a6bc138a42 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleExA
SetLocalTime
WriteConsoleOutputCharacterA
LoadResource
SystemTimeToTzSpecificLocalTime
LoadLibraryExW
GetCurrentProcess
InitializeSListHead
CreateJobObjectW
GlobalLock
CancelWaitableTimer
GetConsoleAliasesA
SetFileTime
GetCompressedFileSizeW
FindResourceExA
GlobalAlloc
LoadLibraryW
GetLocaleInfoW
GetSystemPowerStatus
SetSystemTimeAdjustment
GetExitCodeProcess
Beep
GetFileAttributesW
EnumDateFormatsExW
GetCompressedFileSizeA
GetEnvironmentVariableA
CompareStringW
DisconnectNamedPipe
SetLastError
GetProcAddress
HeapSize
GlobalFree
GetTempFileNameA
OpenWaitableTimerA
GetAtomNameA
OpenWaitableTimerW
VirtualLock
GetCommMask
AddAtomA
GlobalFindAtomW
GetModuleFileNameA
SetConsoleCursorInfo
GlobalUnWire
lstrcatW
GetCurrentDirectoryA
EnumCalendarInfoExA
LCMapStringW
RemoveVectoredExceptionHandler
SetTimeZoneInformation
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CloseHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
ReadFile
SetEndOfFile
GetProcessHeap
GetTimeZoneInformation
CompareStringA
SetEnvironmentVariableA
GetModuleHandleA
IsTextUnicode
RegCreateKeyA
Batman
Candies
Fobos
OneMore
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ