HZsb643Xi
VisibleEntry
Static task
static1
Behavioral task
behavioral1
Sample
d15bfbc181aac8ce9faa05c2063ef4695c09b718596f43edc81ca02ef03110d1.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d15bfbc181aac8ce9faa05c2063ef4695c09b718596f43edc81ca02ef03110d1.dll
Resource
win10v2004-20240426-en
Target
d15bfbc181aac8ce9faa05c2063ef4695c09b718596f43edc81ca02ef03110d1
Size
2.5MB
MD5
f309d2c8a5c82367f0fd2be457055813
SHA1
fe540dd2ba50edb2ecbef0c0180e732ff2403592
SHA256
d15bfbc181aac8ce9faa05c2063ef4695c09b718596f43edc81ca02ef03110d1
SHA512
87f6ea08df063533753e378a8c462c78f306e23e57d2c5203db5d744e21eae6278bd37148fb37b85a5c4661f00d19acc4bfc6821fbe90826dfc3fc8d7321e696
SSDEEP
49152:Dt/ZMdv3SftAUAjdVMFixlWMA7l50ucJj3mUOAY9rsbT/yOjG06XmBKj:R/ZMdvotxcCoxlWp5mzmUOV9ua06Xmk
Checks for missing Authenticode signature.
resource |
---|
d15bfbc181aac8ce9faa05c2063ef4695c09b718596f43edc81ca02ef03110d1 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcessHeap
CloseHandle
CreateActCtxA
ActivateActCtx
DeactivateActCtx
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
WaitForSingleObject
ReleaseActCtx
GetCurrentThread
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
VirtualAlloc
DuplicateHandle
HZsb643Xi
VisibleEntry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ