Dispatch
InputFile
PrintFile
Static task
static1
Behavioral task
behavioral1
Sample
3c5997c3434fd6d594812071b6a57b5a790489ecd1330176ed709fdf510eb9ff.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c5997c3434fd6d594812071b6a57b5a790489ecd1330176ed709fdf510eb9ff.dll
Resource
win10v2004-20240802-en
Target
5fd20e5d70e0cee9356325105b307f14.zip
Size
215KB
MD5
3dae3f415e5267fc6dcc48fdf26334a8
SHA1
87de73a3d14e4751e9410c9bde35b93b82594748
SHA256
a9a79a7bfae2b96bac84332cf249117523eda2d09b724c5ccce25ff362f727cf
SHA512
bbb33a7127f9cab54e9927a79136c40aa122904350e48b90094acd529ee50c1a4a01a44aad404fc8ef2d6e430208bf42c94dddc9d6f71c7246c9fa18809f3992
SSDEEP
6144:wjojqIKuj2TRLMgym9WBkOQ5LMJkTpepx:w3Wj2TRJ/96vKMnx
Checks for missing Authenticode signature.
resource |
---|
unpack001/3c5997c3434fd6d594812071b6a57b5a790489ecd1330176ed709fdf510eb9ff |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ord825
tolower
FindNextFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetDesktopWindow
RegEnumValueA
bind
PathIsDirectoryA
CoCreateInstance
SysAllocString
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
Netbios
Dispatch
InputFile
PrintFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE