ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
665d77c67cd2ca691ea68bac970015f2b55d6006f9f9dc1e810c1ce5a5b1ff23N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
665d77c67cd2ca691ea68bac970015f2b55d6006f9f9dc1e810c1ce5a5b1ff23N.exe
Resource
win10v2004-20241007-en
Target
665d77c67cd2ca691ea68bac970015f2b55d6006f9f9dc1e810c1ce5a5b1ff23N
Size
5.3MB
MD5
32c921545c50abf634a9e93861f439c0
SHA1
fe971cd2a2b360808f5c1dd9a948a8ffd1eb0f3c
SHA256
665d77c67cd2ca691ea68bac970015f2b55d6006f9f9dc1e810c1ce5a5b1ff23
SHA512
ecbe26864f09b8a42809ac82ee78fc5ff979a6931e734e71c261d73dba55beda94a4cb86bb0b4fc6da98a4bd8b0edc7ff72ad09b16c2b78a7549d6a543db0eae
SSDEEP
49152:bHeTlP2+MMzF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7:bmNMA0o7YZQCM0nkHDLXZbbdtiOxj
Checks for missing Authenticode signature.
resource |
---|
665d77c67cd2ca691ea68bac970015f2b55d6006f9f9dc1e810c1ce5a5b1ff23N |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE