GetArphaCrashReport
GetArphaUtils
SetWindowLocalDump
Static task
static1
Behavioral task
behavioral1
Sample
4e03c4e8d7732b698bdba4afe39109f5d8322e298384c2e007ae510952e6bdef.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4e03c4e8d7732b698bdba4afe39109f5d8322e298384c2e007ae510952e6bdef.dll
Resource
win10v2004-20240709-en
Target
4e03c4e8d7732b698bdba4afe39109f5d8322e298384c2e007ae510952e6bdef.exe
Size
280KB
MD5
14b1cb2056eca1ca51fd0180e44072ec
SHA1
80d3d6046bdcc9f40e7431e352b69057f67da96b
SHA256
4e03c4e8d7732b698bdba4afe39109f5d8322e298384c2e007ae510952e6bdef
SHA512
39b86a2f0df45d95afe3901af618552452907cf57e5f590939eacf51b3adfc27d70c7681884a78746e71d36b9b2161660a2596c227ee4431f27b32b655691a61
SSDEEP
3072:nMGFb7a6pT6VL7xzTxvHFPF3Qr77pzmJ1VP0B0CuM1s7Ks+281zuIPfju4C+EKKm:MG5zBMNF4p2XPEbDs+pVDvKI/Dc4o3a
Checks for missing Authenticode signature.
resource |
---|
4e03c4e8d7732b698bdba4afe39109f5d8322e298384c2e007ae510952e6bdef.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryA
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
__C_specific_handler
__std_type_info_destroy_list
memcpy
memset
_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
GetArphaCrashReport
GetArphaUtils
SetWindowLocalDump
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ