Mek
Mek1
Static task
static1
Behavioral task
behavioral1
Sample
d425238bf98d348d88517bd399a81f1e979038a45597f72c955f57fa371df81e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d425238bf98d348d88517bd399a81f1e979038a45597f72c955f57fa371df81e.dll
Resource
win10v2004-20240508-en
Target
d425238bf98d348d88517bd399a81f1e979038a45597f72c955f57fa371df81e
Size
56KB
MD5
21e090f38dec9ad0130e92a05a741680
SHA1
7d28052561cd557b0003ab39261887a2335b3b84
SHA256
d425238bf98d348d88517bd399a81f1e979038a45597f72c955f57fa371df81e
SHA512
59475a2c02e7817b360d1c0e64d8bf5272be322246165150d947d97339c5aa3bf4f7ebfe6a36ff4e00eda3d7cc054fd5731ea34e9f5c3a07135f19ddf1d0ece1
SSDEEP
768:2MEyU2joCXwPaPOZxZ6pRb0x5WOVMYkl2q:oyUuAC6xopRbIoY6
Checks for missing Authenticode signature.
resource |
---|
d425238bf98d348d88517bd399a81f1e979038a45597f72c955f57fa371df81e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA
??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
Mek
Mek1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ