Mek
Mek1
Static task
static1
Behavioral task
behavioral1
Sample
ce9d7b0cd0c4739b4babf68d08d48754b8ebc5a0950f99cd5a7d285f221b3a5f.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ce9d7b0cd0c4739b4babf68d08d48754b8ebc5a0950f99cd5a7d285f221b3a5f.dll
Resource
win10v2004-20240426-en
Target
ce9d7b0cd0c4739b4babf68d08d48754b8ebc5a0950f99cd5a7d285f221b3a5f
Size
56KB
MD5
99a4aaafe8a2969a5d289a4212180413
SHA1
51c7fe3d9f4b1a0db2f2351953b20180b6485ae9
SHA256
ce9d7b0cd0c4739b4babf68d08d48754b8ebc5a0950f99cd5a7d285f221b3a5f
SHA512
2c4c387425b83e6b5a3654a6e49b126639e41cc18666cd60ec39416f24c6972e7bc8f3b23c6e994a5210d513e7372ce09278b8e666b07753cb2a90725dc436d9
SSDEEP
768:2MEyU2joCXwPaPOZxZ6pRb0x5KOVVYkllq:oyUuAC6xopRbI9YL
Checks for missing Authenticode signature.
resource |
---|
ce9d7b0cd0c4739b4babf68d08d48754b8ebc5a0950f99cd5a7d285f221b3a5f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA
??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
Mek
Mek1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ