Main
invalid
Static task
static1
Behavioral task
behavioral1
Sample
97bad38e3a599610c6365a6e23854a884d649807dee375e4ce819a522e5c03ce.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
97bad38e3a599610c6365a6e23854a884d649807dee375e4ce819a522e5c03ce.exe
Resource
win10v2004-20240802-en
Target
97bad38e3a599610c6365a6e23854a884d649807dee375e4ce819a522e5c03ce
Size
601KB
MD5
fe68e004753a06e5ef82fa261d23369b
SHA1
b87504622336bbbcaa6091663b0cb49bb09fca16
SHA256
97bad38e3a599610c6365a6e23854a884d649807dee375e4ce819a522e5c03ce
SHA512
a3a7e73790a720b3c29ce96d1d369d9e02656426ac64fc21e964494fe68b9dfc142583c231a6cc1db089a514e5e6ad10746bd615901e57258cd3310258016785
SSDEEP
6144:drNqQFh0/BpqTgAvtCcV4J/fkVcpjMwLKpt18s4M:aQFwmV7Pw
Checks for missing Authenticode signature.
resource |
---|
97bad38e3a599610c6365a6e23854a884d649807dee375e4ce819a522e5c03ce |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Process32NextW
Process32FirstW
CloseHandle
GetLastError
lstrlenW
Sleep
WideCharToMultiByte
GetSystemTimeAsFileTime
CreateToolhelp32Snapshot
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
QueryPerformanceCounter
CreateProcessWithLogonW
AdjustTokenPrivileges
PrivilegeCheck
OpenProcessToken
LookupPrivilegeValueW
CoInitialize
CoUninitialize
CoCreateInstance
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
?fail@ios_base@std@@QEBA_NXZ
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
__CxxFrameHandler4
memset
memcpy
__current_exception_context
__current_exception
__std_exception_destroy
__std_exception_copy
__std_terminate
__C_specific_handler
_CxxThrowException
memmove
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_crt_atexit
exit
_seh_filter_exe
_set_app_type
terminate
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initialize_onexit_table
_exit
__p___argc
__p___argv
_cexit
_initterm_e
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_c_exit
_set_fmode
fflush
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
__p__commode
fclose
fseek
fgetc
setvbuf
fgetpos
__stdio_common_vswprintf
fwrite
fputc
ftell
__stdio_common_vfprintf
__acrt_iob_func
fopen
_wcsicmp
clock
_lock_file
_unlock_file
_set_new_mode
free
malloc
_callnewh
__setusermatherr
_configthreadlocale
Main
invalid
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ