LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Static task
static1
Behavioral task
behavioral1
Sample
WIT_x86.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
WIT_x86.exe
Resource
win10v2004-20240508-en
Target
WIT_x86.exe
Size
1.2MB
MD5
1542a5fdb7a10000a04b70165b93bb3d
SHA1
5564a78cf371472c27adab8ce688d309b32b1919
SHA256
9b82d8b038625114be5724e71ca45fe31b843dff5d8b7c99b40977f8f033cc7c
SHA512
55288af0d765e852680f1ed96e397d98f819fbf8352e0cb517944583482bdf0304fd3067a48c72a25c649a59caa547df9ff1a39a584ed432c16da88709278c93
SSDEEP
24576:W/TcK4z+kLwkoXiXMAj2Ygk5J/wgh+y59JPdFpeID:W/YbTLoSXM+2YL/V959JPl
Checks for missing Authenticode signature.
resource |
---|
WIT_x86.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE