Mek
Mek1
Static task
static1
Behavioral task
behavioral1
Sample
ce06525d4c2ead15ad5ff19b7405c240d4c3a91fb2e4a2e009f46936057a3d4e.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ce06525d4c2ead15ad5ff19b7405c240d4c3a91fb2e4a2e009f46936057a3d4e.dll
Resource
win10v2004-20240426-en
Target
ce06525d4c2ead15ad5ff19b7405c240d4c3a91fb2e4a2e009f46936057a3d4e
Size
56KB
MD5
221e8a3120b93752f3e2b37f981778de
SHA1
4a505906094bbd6c260f2dc57abc44f94c380643
SHA256
ce06525d4c2ead15ad5ff19b7405c240d4c3a91fb2e4a2e009f46936057a3d4e
SHA512
3ede6c8be072e7ad609fe7ec46d1a74509ee99a870cb37ae90faf41f1e704cb82b5ba1a850b5014f9dbf671a079bb51e5aef92b2a4ed5470891033e6cd8d0762
SSDEEP
768:2MEyU2joCXwPaPOZxZ6pRb0x5KOVpYkllq:oyUuAC6xopRbIBYL
Checks for missing Authenticode signature.
resource |
---|
ce06525d4c2ead15ad5ff19b7405c240d4c3a91fb2e4a2e009f46936057a3d4e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA
??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
Mek
Mek1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ