Mek
Mek1
Static task
static1
Behavioral task
behavioral1
Sample
6a4b1b7bde65a581a8c8c6ad0e95a40a45552ae48dc316d818fa6b9dd45e857b.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6a4b1b7bde65a581a8c8c6ad0e95a40a45552ae48dc316d818fa6b9dd45e857b.dll
Resource
win10v2004-20240508-en
Target
6a4b1b7bde65a581a8c8c6ad0e95a40a45552ae48dc316d818fa6b9dd45e857b
Size
56KB
MD5
15ad40c42143630466686a0affe19c5b
SHA1
bbb509d614d7ee0398ec77dd5ef7f8be5a5c7055
SHA256
6a4b1b7bde65a581a8c8c6ad0e95a40a45552ae48dc316d818fa6b9dd45e857b
SHA512
16336d774fb4103db519070d4716f9680a77a4a9107a8c69cf3bc7e5e39d821a312ec8051bafde20503b2ab9cba7ab3e5a11dec6280baf8bf344cb486948ccea
SSDEEP
768:2MEyU2joCXwPaPOZxZ6pRb0x59OVrYklmq:oyUuAC6xopRbIiYW
Checks for missing Authenticode signature.
resource |
---|
6a4b1b7bde65a581a8c8c6ad0e95a40a45552ae48dc316d818fa6b9dd45e857b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA
??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
Mek
Mek1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ