ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
c502e716912dfb2098a4510327bd97f45635b8655253e778913e3460e847926c.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c502e716912dfb2098a4510327bd97f45635b8655253e778913e3460e847926c.exe
Resource
win10v2004-20240426-en
Target
c502e716912dfb2098a4510327bd97f45635b8655253e778913e3460e847926c
Size
5.9MB
MD5
9669b46a4e134c25278f415c43d57c64
SHA1
f1dae7e132b69a7350832e762d80585e4a42f818
SHA256
c502e716912dfb2098a4510327bd97f45635b8655253e778913e3460e847926c
SHA512
548b80197ca21cd8cd4454136ffcdb68d432384dfc0be95b70d2e2cb791e85b451b5a3d560851062238b041e6945921f151c9dd142ba3a125e937c42af04ff04
SSDEEP
98304:pd43vqlgXfv0TAG+5G3WI/YfWT/SwzcMLlk7DBDH7:74CiXfiAG+5SrIgy7
Checks for missing Authenticode signature.
resource |
---|
c502e716912dfb2098a4510327bd97f45635b8655253e778913e3460e847926c |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE