Mek
Mek1
Static task
static1
Behavioral task
behavioral1
Sample
58c915a9b58012a6406b30a8a19e8fb4af5befb85c380fb4563b7d21417fc441.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
58c915a9b58012a6406b30a8a19e8fb4af5befb85c380fb4563b7d21417fc441.dll
Resource
win10v2004-20240226-en
Target
58c915a9b58012a6406b30a8a19e8fb4af5befb85c380fb4563b7d21417fc441
Size
56KB
MD5
f37c3394991fb9f84c5b5fa06c6cf648
SHA1
390af71cdb73df57019cee7dc0c3fa23ce385492
SHA256
58c915a9b58012a6406b30a8a19e8fb4af5befb85c380fb4563b7d21417fc441
SHA512
5118ae1a79750f3fee12fef3cb7358cb862c7c94e5c63e2c7b5f6f206756962e5e52c64f4fece1b1128963b87ea6817a123e70e14e05b2d739141f7d70a1622b
SSDEEP
768:2MEyU2joCXwPaPOZxZ6pRb0x5KOVlYklNq:oyUuAC6xopRbI9YD
Checks for missing Authenticode signature.
resource |
---|
58c915a9b58012a6406b30a8a19e8fb4af5befb85c380fb4563b7d21417fc441 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA
??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
Mek
Mek1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ