Mek
Mek1
Static task
static1
Behavioral task
behavioral1
Sample
2e4379fa341c3e75b76d61b5fb22e3f5ab838d6ab8e4ea5dfa0a3170f810019a.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2e4379fa341c3e75b76d61b5fb22e3f5ab838d6ab8e4ea5dfa0a3170f810019a.dll
Resource
win10v2004-20240508-en
Target
2e4379fa341c3e75b76d61b5fb22e3f5ab838d6ab8e4ea5dfa0a3170f810019a
Size
56KB
MD5
980fadf5d80582d8d6fa52a68fab356c
SHA1
4a42fd29a61012b0c8103204cc9b756f7018b8e8
SHA256
2e4379fa341c3e75b76d61b5fb22e3f5ab838d6ab8e4ea5dfa0a3170f810019a
SHA512
c8bfb05ee74917087a50b8798799513b8358c95d52639e03ddd21a5bdc2fd743bfbc27bcfce96588a98f06f7335443c475b7beb6ea45e5ed1f0919969d0b9828
SSDEEP
768:2MEyU2joCXwPaPOZxZ6pRb0x5InOVvYklRq:oyUuAC6xopRbIIIY7
Checks for missing Authenticode signature.
resource |
---|
2e4379fa341c3e75b76d61b5fb22e3f5ab838d6ab8e4ea5dfa0a3170f810019a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA
??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
Mek
Mek1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ