Coruso
Gorgeous
Static task
static1
Behavioral task
behavioral1
Sample
download.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
download.exe
Resource
win10-20240404-en
Target
download.exe
Size
2.0MB
MD5
8faae284d1916fd96ff9bb49c19fa29c
SHA1
2a03153b27cdeff58a72cd7f3a76e9632e5a30de
SHA256
f42c6dd7e222a0340b75a68e9b42e90dcdd3047321c8e0bd548f4eea1b54ec3b
SHA512
39f4ffc4f11914689a1d850d4ef7c4906de717796a17d71e2acab6330ecccce1e597492d1573dd2d32081020831a8cb1663549fb1ab5fb6b515c7936575aae21
SSDEEP
49152:KwF1v7yRv6U3YkNJ2vNN/mQYkDwOmxSbN7iDv+:KwFl2v3Lc1NHEO3bRiDv
Checks for missing Authenticode signature.
resource |
---|
download.exe |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExitProcess
RemoveVectoredExceptionHandler
FindResourceA
WriteConsoleOutputCharacterA
SystemTimeToTzSpecificLocalTime
SetWaitableTimer
GetCurrentProcess
HeapFree
GetModuleHandleExW
CancelWaitableTimer
LockFile
SetTapeParameters
GetCompressedFileSizeW
FindResourceExA
GetLocaleInfoW
SizeofResource
SetSystemTimeAdjustment
GetFileAttributesA
GetExitCodeProcess
GetAtomNameW
GetTimeZoneInformation
GetEnvironmentVariableA
GlobalUnlock
DisconnectNamedPipe
VirtualUnlock
GetConsoleAliasesW
SetLastError
OpenWaitableTimerW
LocalAlloc
SetConsoleCtrlHandler
SetConsoleOutputCP
AddAtomA
GlobalFindAtomW
GlobalUnWire
lstrcatW
VirtualProtect
GetFileTime
LocalFree
SetFileAttributesW
LocalFileTimeToFileTime
SetEnvironmentVariableA
CompareStringW
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
FreeLibrary
InterlockedExchange
LoadLibraryA
MultiByteToWideChar
CloseHandle
CreateFileA
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
ReadFile
SetEndOfFile
GetProcessHeap
CompareStringA
GetModuleHandleA
GetMonitorInfoA
Coruso
Gorgeous
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ