NEPR15
_NEPR15@12
Static task
static1
Behavioral task
behavioral1
Sample
6b8ca318a67c7e27de9140ebeb7e3526deeeee3521684b9a6d42745f93d602ab.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6b8ca318a67c7e27de9140ebeb7e3526deeeee3521684b9a6d42745f93d602ab.dll
Resource
win10v2004-20240508-en
Target
6b8ca318a67c7e27de9140ebeb7e3526deeeee3521684b9a6d42745f93d602ab.exe
Size
1.4MB
MD5
885ddb40660504fbc1484c0747c61c50
SHA1
9244a7e4c6dc7b487d4f89b27707ad6963a4662f
SHA256
6b8ca318a67c7e27de9140ebeb7e3526deeeee3521684b9a6d42745f93d602ab
SHA512
27580c6af3a41832303ca6ae121b803c96b9985dda46730e1a4b4b9bf8782546aa21cadea3083056040fdac34cc6951c7d9d4705c25462c349bb5666eeca70c9
SSDEEP
24576:EwYKVEkgcpQlZ43JF1SSqmmIeIk/QwCrIjE/IDqWPEUCgIJ0ITfdh2PtC:rEk1pD3RqmmIHHrNADqWcUdITf
Checks for missing Authenticode signature.
resource |
---|
6b8ca318a67c7e27de9140ebeb7e3526deeeee3521684b9a6d42745f93d602ab.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Konec3C
KonecC
GetStateCalculationC
SetNumToTxtC
PointToGraf2C
PointToGrafC
GetNameC
GetTextC
DynInfoC
WindowC
DoProcC
DotazC
ShowErrWarnC
SetInfoLineC
VpisC
PrepniC
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalMemoryStatus
VirtualAlloc
VirtualQuery
VirtualFree
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesExA
GetFileSize
GetFileAttributesA
GetLastError
SetFilePointer
WriteFile
GetFileType
SetEndOfFile
ReadFile
GetThreadLocale
GetStdHandle
CloseHandle
FormatMessageA
IsDebuggerPresent
GetModuleHandleA
CreateFileA
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
CreateMutexA
DeleteCriticalSection
InitializeCriticalSection
SetEvent
CreateEventA
ExitThread
TerminateThread
Sleep
GetFileInformationByHandle
GetFullPathNameA
GetTempFileNameA
GetTempPathA
InterlockedExchange
SetLastError
CreateProcessA
SetThreadPriority
GetVersionExA
DeleteFileA
SetConsoleCtrlHandler
GetACP
GetCommandLineA
SetErrorMode
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
IsBadReadPtr
GetHandleInformation
UnmapViewOfFile
FlushFileBuffers
GetCurrentDirectoryA
SetCurrentDirectoryA
FindFirstFileA
FindNextFileA
FindClose
SystemTimeToFileTime
RtlUnwind
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapReAlloc
HeapFree
IsProcessorFeaturePresent
SetStdHandle
GetConsoleCP
GetConsoleMode
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetCurrentThread
GetProcessHeap
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
GetModuleHandleW
RaiseException
IsValidCodePage
GetOEMCP
GetCPInfo
GetModuleFileNameW
LoadLibraryExW
HeapSize
GetFileAttributesExW
SetFilePointerEx
WriteConsoleW
GetStringTypeW
CompareStringW
LCMapStringW
SetEnvironmentVariableA
OutputDebugStringW
CreateFileW
ReadConsoleW
SymCleanup
StackWalk64
SymInitialize
NEPR15
_NEPR15@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ