Mek
Mek1
Static task
static1
Behavioral task
behavioral1
Sample
ca5046e9b17addcc53abf46b2c0c7b942928f858af6d278416a57841459fe2ef.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ca5046e9b17addcc53abf46b2c0c7b942928f858af6d278416a57841459fe2ef.dll
Resource
win10v2004-20240802-en
Target
ca5046e9b17addcc53abf46b2c0c7b942928f858af6d278416a57841459fe2ef
Size
90KB
MD5
ba7caabd4ab64920d9f90e95eb41f05a
SHA1
be8ef6825bcb1711260d317e449d9303b12cb051
SHA256
ca5046e9b17addcc53abf46b2c0c7b942928f858af6d278416a57841459fe2ef
SHA512
eff0d24d01df3ddc1edcdf517b2cbd3976bf763b93aada146005a9ddd7e2a63a93ddf46e69c2b12a8eaef0788cd94d5090745efe5d5f48dcb63b70b543407359
SSDEEP
768:7bEq8m/wCngPuPa995+qsPs99jOV2lxq:kq8Sg2C9IqsPk4
Checks for missing Authenticode signature.
resource |
---|
ca5046e9b17addcc53abf46b2c0c7b942928f858af6d278416a57841459fe2ef |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA
??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
Mek
Mek1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ