Mek
Mek1
Static task
static1
Behavioral task
behavioral1
Sample
c776215b1a1a5e4428dd76efd28578d1c0e6a729a9c0e4a83617a3dc5e06f660.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c776215b1a1a5e4428dd76efd28578d1c0e6a729a9c0e4a83617a3dc5e06f660.dll
Resource
win10v2004-20240426-en
Target
c776215b1a1a5e4428dd76efd28578d1c0e6a729a9c0e4a83617a3dc5e06f660
Size
56KB
MD5
cb9fe75997ed9eb1750e82de87c2c3d2
SHA1
811bd7c24e3c275e83d1ca7111349a27571ca5d8
SHA256
c776215b1a1a5e4428dd76efd28578d1c0e6a729a9c0e4a83617a3dc5e06f660
SHA512
3a555f06720d7596d3e773c1d44c90e7a3c3c1cea6c7223e3a2e60cd83e9f189210535f2477ecf227b80241d06b053615d7b7ecd89e08dc015dee97640fbdb4f
SSDEEP
768:2MEyU2joCXwPaPOZxZ6pRb0x5sOV4YklKq:oyUuAC6xopRbIuY2
Checks for missing Authenticode signature.
resource |
---|
c776215b1a1a5e4428dd76efd28578d1c0e6a729a9c0e4a83617a3dc5e06f660 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA
??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
Mek
Mek1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ