FreeInstalledPackageInfo
GetInstalledPackageInfo
Test
rundll
start
Static task
static1
Behavioral task
behavioral1
Sample
1b91b0dedf19d07324d2b61fbbe120fed77a90b74e8680df94f802a3bf6bb00b.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1b91b0dedf19d07324d2b61fbbe120fed77a90b74e8680df94f802a3bf6bb00b.dll
Resource
win10v2004-20240910-en
Target
1b91b0dedf19d07324d2b61fbbe120fed77a90b74e8680df94f802a3bf6bb00b.exe
Size
176KB
MD5
4013fb8ec1263f3fc4dbf7411122be54
SHA1
ede00c8915a7387df3aa4e6b5ba7c86152fb1180
SHA256
1b91b0dedf19d07324d2b61fbbe120fed77a90b74e8680df94f802a3bf6bb00b
SHA512
affb5c62ceabbac1c855b62e7db9cf12d0a83b3218bb40e2f5de82eccdc4857c093dd818b38e920557691cb7a5637db90c417aaf53218f039992cb24bedde7e7
SSDEEP
384:gT/WSnV4iPKeAsZxrpVrJy1KPAZRsZiMaxs1vvW9TOmZ:grM0Zx1VVGb9o1GxOu
Checks for missing Authenticode signature.
resource |
---|
1b91b0dedf19d07324d2b61fbbe120fed77a90b74e8680df94f802a3bf6bb00b.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
OpenProcessToken
CloseHandle
CreateMutexA
CreatePipe
CreateProcessA
GetComputerNameA
GetCurrentProcess
GetExitCodeProcess
GetFileSize
GetModuleFileNameA
GetVersionExA
ReadFile
ReleaseMutex
SetHandleInformation
Sleep
TerminateProcess
VerSetConditionMask
VerifyVersionInfoA
WaitForSingleObject
WriteFile
_beginthread
exit
fclose
fopen
fread
free
fseek
ftell
fwrite
getenv
malloc
memcpy
memset
rand
sprintf
srand
strcpy
strlen
wcstombs
_time64
NetApiBufferFree
NetGetJoinInformation
WSACleanup
WSAStartup
__WSAFDIsSet
closesocket
connect
freeaddrinfo
getaddrinfo
htons
inet_addr
inet_ntop
ntohs
recv
select
send
setsockopt
socket
FreeInstalledPackageInfo
GetInstalledPackageInfo
Test
rundll
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ