LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Static task
static1
Behavioral task
behavioral1
Sample
c1b80cdab81f9c50a4ae3b3effb6a43d6c3fe40a63ab2f266c70818c1a9e2457.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c1b80cdab81f9c50a4ae3b3effb6a43d6c3fe40a63ab2f266c70818c1a9e2457.exe
Resource
win10v2004-20240802-en
Target
c1b80cdab81f9c50a4ae3b3effb6a43d6c3fe40a63ab2f266c70818c1a9e2457
Size
6.2MB
MD5
2d49b09236ead8c6a950e2202fd7eb03
SHA1
3cf06f742c43013ef6b0a854a01b53e2af31b74f
SHA256
c1b80cdab81f9c50a4ae3b3effb6a43d6c3fe40a63ab2f266c70818c1a9e2457
SHA512
08e22a918b7cc78603b30e83c8b1a2217ce54b22b153be128d00e05e0a885b17e800fdf3b45abe43406ed3f6e3a71414c1c7c54390d392a11207001eb8e27d0d
SSDEEP
98304:9w6Nd9UmbQp5QZBeqs8awGSjAYF/wex17vnXFO+wkTyvgnrPcIERU8k:9w6NdK35QjiwA6/flnxweyvoYrm
Checks for missing Authenticode signature.
resource |
---|
c1b80cdab81f9c50a4ae3b3effb6a43d6c3fe40a63ab2f266c70818c1a9e2457 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE