ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
59ba6e28eaae162751ca04b2291fb167d42441d98910873a29084e769cfc543e.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59ba6e28eaae162751ca04b2291fb167d42441d98910873a29084e769cfc543e.exe
Resource
win10v2004-20240802-en
Target
59ba6e28eaae162751ca04b2291fb167d42441d98910873a29084e769cfc543e
Size
5.3MB
MD5
fa7231c2828558e198482d3148de259f
SHA1
55806f7ff8b7938ac7385e02916aeb314d32236a
SHA256
59ba6e28eaae162751ca04b2291fb167d42441d98910873a29084e769cfc543e
SHA512
3e57cd0037fa48d2e59c6499487261d48c0fa561fe5ac9e0c469b368cfa35474d60601e09837b235565459752bad143b7e993780f93311f340e3491f17098b27
SSDEEP
49152:bHeTlP2+MMzF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7M:bmNMA0o7YZQCM0nkHDLXZbbdliOxj
Checks for missing Authenticode signature.
resource |
---|
59ba6e28eaae162751ca04b2291fb167d42441d98910873a29084e769cfc543e |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE