Gorgeous
Probka
Static task
static1
Behavioral task
behavioral1
Sample
artifact.exe
Resource
win7-20240903-en
Target
artifact.bin
Size
587KB
MD5
f9ed4d7fc5d978abdc6860539c0b2491
SHA1
66013ed2cdc880ce12af82019095aec9364d47e3
SHA256
24c1836bd5c60dde678cb2508cc5fb64a2aaf69d5ddf0dec3a3ff4ceee63904a
SHA512
c2e6a9a3f7e906ae94af666e0261c7337e93d81c18dc1c337fc1a0440d50197ed924f51b0be9c5dbc9b5e16e51dd40ef93d2eaa76a77a0c2ac68136312008fbe
SSDEEP
12288:JcYzQFE8IxkNke/zE2z+ry4vVMaRz8QFbn+79Uy/ls8aCwd:2uQFVIxvozr+gIz8++blstC
Checks for missing Authenticode signature.
resource |
---|
artifact.bin |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetEnvironmentVariableW
RemoveVectoredExceptionHandler
WriteConsoleOutputCharacterW
GetModuleHandleExA
GetLocaleInfoA
FindResourceExW
FindResourceW
LoadResource
SystemTimeToTzSpecificLocalTime
InterlockedIncrement
SetConsoleTextAttribute
CancelWaitableTimer
ConnectNamedPipe
SetFileTime
GetCompressedFileSizeW
GlobalFindAtomA
GetSystemTimeAdjustment
GetFileAttributesA
SetTimeZoneInformation
TerminateProcess
GetAtomNameW
FileTimeToSystemTime
GlobalUnlock
SetLastError
OpenWaitableTimerW
LocalAlloc
SetConsoleOutputCP
AddAtomA
GetTapeParameters
GlobalUnWire
VirtualProtect
GetCurrentProcessId
LocalFree
lstrcpyW
SetFileAttributesW
SetEnvironmentVariableA
CompareStringW
GetStartupInfoW
RaiseException
RtlUnwind
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FatalAppExitA
VirtualAlloc
HeapReAlloc
HeapSize
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
CreateFileA
CloseHandle
FlushFileBuffers
GetTimeZoneInformation
CompareStringA
GetModuleHandleA
GetMonitorInfoA
Gorgeous
Probka
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ