PER052
READF56
Static task
static1
Behavioral task
behavioral1
Sample
ae7aecfb39ce9491c679ca42038c41c4e4819a6444e6ebf64f47020a14dd4512.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ae7aecfb39ce9491c679ca42038c41c4e4819a6444e6ebf64f47020a14dd4512.dll
Resource
win10v2004-20240508-en
Target
ae7aecfb39ce9491c679ca42038c41c4e4819a6444e6ebf64f47020a14dd4512
Size
50KB
MD5
a8627bff8e9ce06be6237d11752a07fb
SHA1
dfec9ecbec572297a8c6dfc93b4500d49dc557c4
SHA256
ae7aecfb39ce9491c679ca42038c41c4e4819a6444e6ebf64f47020a14dd4512
SHA512
57604b3d4cafbc3a215d1b3f08c4423d7dd82c5002122e16861c0c618ce841f553a7cdd6f913730b6edd7f982918ace286d8984c6726d1d9a90c054ff591b4f7
SSDEEP
768:Q1etlFz8/OI2Jl/3nQ+koNbPKwzo4YvvXO49ZFNcZliWx/WeDAei:oeLFz8XOq+HVG4YvvJRNCiWHxi
Checks for missing Authenticode signature.
resource |
---|
ae7aecfb39ce9491c679ca42038c41c4e4819a6444e6ebf64f47020a14dd4512 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
InitCommonControlsEx
CloseHandle
CreateFileW
ExitProcess
FindClose
FlushFileBuffers
GetCommandLineW
GetFileSize
GetFileType
GetLastError
GetStringTypeA
GetVersionExA
GlobalAlloc
GlobalFree
MultiByteToWideChar
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantClear
CharLowerBuffA
CharNextA
CharUpperBuffA
closesocket
WSACleanup
LAYOUT
PER052
READF56
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ