Gorgeous
Robinson
SeeYou
Static task
static1
Behavioral task
behavioral1
Sample
3d7809d9eeab2b8d49967222cbed7962af14643472238fa9da69b035604bf9fe.exe
Resource
win7-20240221-en
Target
3d7809d9eeab2b8d49967222cbed7962af14643472238fa9da69b035604bf9fe
Size
292KB
MD5
02ee028565fa711ea492bc8741517bb6
SHA1
177938b65bcfa3017daf4884ca97246d0cdec66b
SHA256
3d7809d9eeab2b8d49967222cbed7962af14643472238fa9da69b035604bf9fe
SHA512
c041a023a3059860e41db3152b68702ba40d269cb72daba833822dc608e01a77276bdbc78794fa1095c30adb7af97ebf6d9c64111dcf94934667d0347a7eb6e1
SSDEEP
3072:wH36N1LhesnkfVJi8yT+93nGsb1OP3S2Al4XxTztaItHngScBcJUlmTLjrgwHx3H:F1LhHngpY0nK3SfSg9JYTXkwHxX
Checks for missing Authenticode signature.
resource |
---|
3d7809d9eeab2b8d49967222cbed7962af14643472238fa9da69b035604bf9fe |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WriteConsoleOutputCharacterA
LoadResource
SystemTimeToTzSpecificLocalTime
HeapAlloc
SetWaitableTimer
HeapFree
GetModuleHandleExW
GlobalLock
LockFile
ConnectNamedPipe
GetConsoleAliasesA
FindResourceExA
GlobalAlloc
GetLocaleInfoW
GetSystemTimeAdjustment
InterlockedPopEntrySList
GetFileAttributesA
GetExitCodeProcess
GetCompressedFileSizeA
EnumDateFormatsExW
GetEnvironmentVariableA
VirtualUnlock
LCMapStringA
GetAtomNameA
OpenWaitableTimerW
AddAtomA
GetTapeParameters
GlobalFindAtomW
SetConsoleCursorInfo
GlobalUnWire
VirtualProtect
GetFileTime
GetCurrentProcessId
EnumCalendarInfoExA
LocalFree
LocalFileTimeToFileTime
SetEnvironmentVariableA
CompareStringW
GetTimeZoneInformation
RemoveVectoredExceptionHandler
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FatalAppExitA
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
CloseHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
ReadFile
SetEndOfFile
GetProcessHeap
HeapSize
CompareStringA
GetModuleHandleA
GetProcessDefaultLayout
EqualSid
Gorgeous
Robinson
SeeYou
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ