Mek
Mek1
Static task
static1
Behavioral task
behavioral1
Sample
9bfa35f580d4237a06c5f44e104a1a6d8467b3d307e9d8f344f1a0c837ae08ca.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9bfa35f580d4237a06c5f44e104a1a6d8467b3d307e9d8f344f1a0c837ae08ca.dll
Resource
win10v2004-20240508-en
Target
9bfa35f580d4237a06c5f44e104a1a6d8467b3d307e9d8f344f1a0c837ae08ca
Size
56KB
MD5
7a04b044ec7c33a23f06336656622a45
SHA1
5df42e5d884c6db70e8988ef4aa23539431b9f14
SHA256
9bfa35f580d4237a06c5f44e104a1a6d8467b3d307e9d8f344f1a0c837ae08ca
SHA512
60fec47ecd599c173c288390e0ef446c3a4aa9cea169b77c2416c8c92276c964faca1143f05ba5cc02b925dc984aa63367e752af8294e1bda5b1db0de109a161
SSDEEP
768:2MEyU2joCXwPaPOZxZ6pRb0x5yOVqYkllq:oyUuAC6xopRbIKYn
Checks for missing Authenticode signature.
resource |
---|
9bfa35f580d4237a06c5f44e104a1a6d8467b3d307e9d8f344f1a0c837ae08ca |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA
??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
Mek
Mek1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ