?LORPE01@@YAKK@Z
?LORPE02@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_b62912a1b2fe694466e1d44d6e5402d0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_b62912a1b2fe694466e1d44d6e5402d0.exe
Resource
win10v2004-20240426-en
Target
VirusShare_b62912a1b2fe694466e1d44d6e5402d0
Size
192KB
MD5
b62912a1b2fe694466e1d44d6e5402d0
SHA1
07d33be18ff75653f6202477ca35d0ee2639f696
SHA256
ba4384600c155c19d35de007f4771c21ca44898d696a88450be52783791134fd
SHA512
2c23e9da74eb92d0300da17ef2519b1a1f0931bb98806c12761d2c1418b01505190a5828ec7da7a057e902016d52836ca266d946aec172521e000a2d7fec6c20
SSDEEP
3072:VhFT75csGnXjp2IuG3vQIrya/S+NmNq0YQvLpPeUTGOWWpFZlB0Z72v0R9ztBJWg:ftC4DGoNaiNdYgVeUQWprlCRf7nEtq
Checks for missing Authenticode signature.
resource |
---|
VirusShare_b62912a1b2fe694466e1d44d6e5402d0 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Sleep
GetLocalTime
InterlockedExchange
TerminateProcess
GetProcAddress
SuspendThread
LoadLibraryA
LoadLibraryW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
CloseHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
CreateFileA
?LORPE01@@YAKK@Z
?LORPE02@@YAKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ