?FCalcI2@@YAKK@Z
?FCalcI@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_5821e8fc31a510e21d20983bef6c5890.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
VirusShare_5821e8fc31a510e21d20983bef6c5890.exe
Resource
win10v2004-20240426-en
Target
VirusShare_5821e8fc31a510e21d20983bef6c5890
Size
96KB
MD5
5821e8fc31a510e21d20983bef6c5890
SHA1
2862b8c3b78ac8b05ba4f2629727b11d66a94a48
SHA256
1c22853916d5ff626e2a2abf8f3f6c56eb9e6924dc15b5df7b5b42ae7f8ce2f4
SHA512
f2d18699bebb01d003880fd473d126ee84a1973c5c1ed9a0a168d618749fd714c3e74df86c50a029766050d18ae05a93f9c51b89b90726741be67282bc31e427
SSDEEP
1536:rt4TH6EYJXIv3WXK5N9cL4veQOkOtLKCDFDYPLv8gDEgR4lO:rC7nkXQGocL4veQOkO9DWPomEgRe
Checks for missing Authenticode signature.
resource |
---|
VirusShare_5821e8fc31a510e21d20983bef6c5890 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
TerminateThread
TerminateProcess
GetSystemDirectoryA
GetProcAddress
GetTickCount
GetModuleHandleA
LoadLibraryW
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
RtlUnwind
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
VirtualQuery
LoadIconA
ShowWindow
SendMessageA
DestroyWindow
EnableWindow
CoInitialize
select
?FCalcI2@@YAKK@Z
?FCalcI@@YAKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ