LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Static task
static1
Behavioral task
behavioral1
Sample
4fa8950c39f0ee064797525ee5759f74ecc7c889f119de46f76d78632ff77a98.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4fa8950c39f0ee064797525ee5759f74ecc7c889f119de46f76d78632ff77a98.exe
Resource
win10v2004-20240508-en
Target
4fa8950c39f0ee064797525ee5759f74ecc7c889f119de46f76d78632ff77a98
Size
2.4MB
MD5
1c463c39f4875320a9a20442a9922a06
SHA1
091ef5fd0b9e5ff1d972ac6c0c07841c48fe7962
SHA256
4fa8950c39f0ee064797525ee5759f74ecc7c889f119de46f76d78632ff77a98
SHA512
1decd6a65ed5857b589992719ac487de9ad25b91d2f4e9e8e7697b17ab3d353600deb9bad0ab893f5f8f4812b93756c9b38008a688530f27b5d386aa5f040b58
SSDEEP
49152:w9cXy4Ai+lTiTHdjRpeKsvev5aOB+1zvjy2s40JNPidM:wB4Ai+lO5DoWvVB+1zry54uPi
Checks for missing Authenticode signature.
resource |
---|
4fa8950c39f0ee064797525ee5759f74ecc7c889f119de46f76d78632ff77a98 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE