BlockMove
MemManager
MirrorMove
MirrorMove128
RefreshStable
SimpleTest
Static task
static1
Behavioral task
behavioral1
Sample
TM5(anta777cfg)/TM5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
TM5(anta777cfg)/TM5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
TM5(anta777cfg)/bin/MT0.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
TM5(anta777cfg)/bin/MT0.dll
Resource
win10v2004-20240802-en
Target
6bc2ecec680daf8acd6992477598856b28a0280e5ae00c457199330a46915cf1
Size
26KB
MD5
d5e83ca5ba55e83f49ec354bb7ff0751
SHA1
4e1ea23c23f6561fee7c62a1b559199281812d40
SHA256
6bc2ecec680daf8acd6992477598856b28a0280e5ae00c457199330a46915cf1
SHA512
e9cf685e04c49661b59438f83d2d3dac6f2048eb39709a0c4b7ab861dceb0dc00d50730ef4565a76608884facbafa3c10039a057f66699f64cb4c66666e6dcb2
SSDEEP
384:FRRiiVrR+IiTZXNRFK3QMF5kIL024uV/cxdaYouka3OX5SI33mQQEfnLHmvfRpj:FRR3jil9zK3tzkIA2/6guka80I33mN6m
Checks for missing Authenticode signature.
resource |
---|
unpack001/TM5(anta777cfg)/TM5.exe |
unpack001/TM5(anta777cfg)/bin/MT0.dll |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetPriorityClass
SetThreadPriority
Sleep
TerminateProcess
TerminateThread
VirtualAlloc
ReadFile
WriteFile
WritePrivateProfileStringA
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
QueryPerformanceFrequency
QueryPerformanceCounter
SetFilePointer
MapViewOfFile
LoadLibraryA
HeapFree
HeapAlloc
GlobalMemoryStatusEx
GlobalFree
GlobalAlloc
GetVersion
GetUserDefaultLangID
GetTickCount
GetSystemInfo
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetPrivateProfileStringA
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
RtlZeroMemory
MultiByteToWideChar
GetLastError
GetFileSize
GetCurrentThread
GetCurrentProcess
GetCompressedFileSizeA
GetCommandLineA
ExitThread
ExitProcess
CreateThread
CreateProcessA
CreateFileMappingA
CreateFileA
VirtualFree
CloseHandle
wsprintfA
SendMessageA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetTimer
SetForegroundWindow
SetDlgItemTextA
GetWindowPlacement
MessageBoxA
LoadIconA
GetWindowRect
GetWindowLongA
GetSysColor
GetDlgItem
GetDlgCtrlID
DialogBoxParamA
InitCommonControls
InitCommonControlsEx
SetBkMode
CreateSolidBrush
CreateFontA
SetTextColor
ShellExecuteA
RegOpenKeyExA
LsaOpenPolicy
RegQueryValueExA
timeGetTime
GetSaveFileNameA
GetOpenFileNameA
ZwQuerySystemInformation
CoInitialize
CoUninitialize
CoCreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapAlloc
HeapFree
MapUserPhysicalPages
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessWorkingSetSize
SetProcessWorkingSetSize
VirtualAlloc
VirtualFree
VirtualLock
VirtualUnlock
WriteFile
GetProcessHeap
GetLastError
GetCurrentProcess
FreeUserPhysicalPages
CreateFileA
CloseHandle
RtlZeroMemory
AllocateUserPhysicalPages
MessageBoxA
wsprintfA
LsaClose
LookupPrivilegeValueA
GetTokenInformation
AdjustTokenPrivileges
LsaOpenPolicy
OpenProcessToken
LsaAddAccountRights
timeGetTime
BlockMove
MemManager
MirrorMove
MirrorMove128
RefreshStable
SimpleTest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ