HZsb643Xi
start
Static task
static1
Behavioral task
behavioral1
Sample
5b2178c7a0fd69ab00cef041f446e04098bbb397946eda3f6755f9d94d53c221.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5b2178c7a0fd69ab00cef041f446e04098bbb397946eda3f6755f9d94d53c221.dll
Resource
win10-20240404-en
Target
5b2178c7a0fd69ab00cef041f446e04098bbb397946eda3f6755f9d94d53c221
Size
16.1MB
MD5
d513a09a10122ba8cd6df651aae35fb0
SHA1
79054b409cb1c7a36aafd9a9915f948e2f018734
SHA256
5b2178c7a0fd69ab00cef041f446e04098bbb397946eda3f6755f9d94d53c221
SHA512
3d69309c24ac3d12c79c750d584bb6f1ec805090ad2ddf60c6b1bdfa3c9a35d5563f991a992cc5f293bc27b23dd62708310c8f6b1cde7eec2abd22a44f83862e
SSDEEP
393216:xU1hrEqx51pI6/vVrQXtdnEcX6zeRLj1Wc2yKFEWtlfoM2ySyTR1PsUcUjell+:HMV99sA6T
Checks for missing Authenticode signature.
resource |
---|
5b2178c7a0fd69ab00cef041f446e04098bbb397946eda3f6755f9d94d53c221 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcessHeap
CloseHandle
CreateActCtxA
ActivateActCtx
DeactivateActCtx
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
WaitForSingleObject
ReleaseActCtx
GetCurrentThread
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
VirtualAlloc
DuplicateHandle
HZsb643Xi
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ