Mek
Mek1
Static task
static1
Behavioral task
behavioral1
Sample
a27e3eb82ec1a9fa7bb2676e8eedc9a169cfd60660bd1a5189aed8634ddc8fad.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a27e3eb82ec1a9fa7bb2676e8eedc9a169cfd60660bd1a5189aed8634ddc8fad.dll
Resource
win10v2004-20240802-en
Target
a27e3eb82ec1a9fa7bb2676e8eedc9a169cfd60660bd1a5189aed8634ddc8fad
Size
90KB
MD5
7f1cce06f93efb38e6fe3b1411d3c92d
SHA1
4ef1ee323706064b6525a68d2d53449ed84a6101
SHA256
a27e3eb82ec1a9fa7bb2676e8eedc9a169cfd60660bd1a5189aed8634ddc8fad
SHA512
13b6d9e9dbc9a6e59aa696233abdb7d760b7998e1661b2e1e3643d93db33e3bff783f12830f9928201eedf7bb843cc3fd716124ed87f1dd90daf5573ab4831ae
SSDEEP
768:7JEcgQWM5CB7TzPHPH1R9pMm3P6rY7ov6r2OVSuIlVq:CcgQWB73fv39TP6rY7oqd/
Checks for missing Authenticode signature.
resource |
---|
a27e3eb82ec1a9fa7bb2676e8eedc9a169cfd60660bd1a5189aed8634ddc8fad |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA
??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
Mek
Mek1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ