__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
8e4c1e96473c66064ad771e528720fd7257b3aa050942a47d1896d7b02338c31.exe
Resource
win7-20240221-en
Target
8e4c1e96473c66064ad771e528720fd7257b3aa050942a47d1896d7b02338c31
Size
326KB
MD5
d0705a76b2a107bf579545a59bc8c08f
SHA1
1907cb033739d6afd545a91b77dee8bbec0a50d9
SHA256
8e4c1e96473c66064ad771e528720fd7257b3aa050942a47d1896d7b02338c31
SHA512
f7197e2c9eda633d8e1ddcc95559ce61a971ae9533df345384168159e9ada5044c2e148159699c2767d81b12b7a50692fd6d4defbcea129e16296dc69ad41bd0
SSDEEP
6144:B0sHlGqLOKv7iSmFC/jOlhFPIt+MUf0A/DTslaQR:BdHkmOqiSmFC/jOrJulAslbR
Checks for missing Authenticode signature.
resource |
---|
8e4c1e96473c66064ad771e528720fd7257b3aa050942a47d1896d7b02338c31 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
ChangeServiceConfigW
CloseServiceHandle
ControlService
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
StartServiceW
CloseHandle
CopyFileW
CreateFileA
CreateFileMappingA
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetUserDefaultLCID
GetVersion
GetVersionExA
GetWindowsDirectoryW
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
MoveFileW
MultiByteToWideChar
OpenFileMappingA
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
WriteFile
EnumThreadWindows
MessageBoxA
wsprintfA
PathFileExistsW
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE