LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
Static task
static1
Behavioral task
behavioral1
Sample
0fedd597991d8a76c808d66e654583f6f2b8658d887b8d546228186895a421be.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0fedd597991d8a76c808d66e654583f6f2b8658d887b8d546228186895a421be.exe
Resource
win10v2004-20240508-en
Target
0fedd597991d8a76c808d66e654583f6f2b8658d887b8d546228186895a421be
Size
1000KB
MD5
8b2a8139c643f2e2c42932cc47467434
SHA1
67d8b81a868612cb95809ca68eb25f4c725359a8
SHA256
0fedd597991d8a76c808d66e654583f6f2b8658d887b8d546228186895a421be
SHA512
549b58af1754b81854d926e3b72585992029b176dfb4225c6285b9b7324a9b40e13e6caf8a14363712f250c6041c743945be4ea601813852409e15db5ea2264f
SSDEEP
24576:IlMjpGhAUHHXXVQE1ouWiDJtg3+JltROCQ6vTD0MaTqFJ3B5JDsr:gRVN2iDDnlPzQ6/BaALR
Checks for missing Authenticode signature.
resource |
---|
0fedd597991d8a76c808d66e654583f6f2b8658d887b8d546228186895a421be |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE