LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Static task
static1
Behavioral task
behavioral1
Sample
c3198e30a47c3912b5dbb32fadcd8bf6f1c0ed196b9acfd48bc0d7c0aae3cb3c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c3198e30a47c3912b5dbb32fadcd8bf6f1c0ed196b9acfd48bc0d7c0aae3cb3c.exe
Resource
win10v2004-20241007-en
Target
c3198e30a47c3912b5dbb32fadcd8bf6f1c0ed196b9acfd48bc0d7c0aae3cb3c
Size
1.0MB
MD5
53607c61b0eea31f7e84dffa4dc8da44
SHA1
775aaf7dda92f2bab0ac3b2dbc084715e3a22895
SHA256
c3198e30a47c3912b5dbb32fadcd8bf6f1c0ed196b9acfd48bc0d7c0aae3cb3c
SHA512
f88f39012541e06dcdb8504aa3c537922088b1c33311e2d5a080ae16fe5608dfeca8591182eadc20e3b6cf51a2b5a05dd21d15b12af9e060c3d04ed2af9dac7f
SSDEEP
24576:gyiMB9GSr5IptDuqbX0SH3mTjpB7323XVylWmn1Q/vZdN:/9cHP0s+9B7m3Fyps
Checks for missing Authenticode signature.
resource |
---|
c3198e30a47c3912b5dbb32fadcd8bf6f1c0ed196b9acfd48bc0d7c0aae3cb3c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE