BsFIy52i
DllRegisterServer
FVHB61426r
HkaQGiJh
ZGH02
Static task
static1
Behavioral task
behavioral1
Sample
39f609e59d6bbb9e705ae430de6eb6e92cee2e722d74f4369cc6ff7c601809a7.dll
Resource
win7-20240903-en
Target
39f609e59d6bbb9e705ae430de6eb6e92cee2e722d74f4369cc6ff7c601809a7.exe
Size
3.0MB
MD5
0bbcf2a86a4f752d216029682ccc0616
SHA1
4016ec20c14c11d597b0f023e2ba3f865037a551
SHA256
39f609e59d6bbb9e705ae430de6eb6e92cee2e722d74f4369cc6ff7c601809a7
SHA512
e35495e3a8ed1b875ff7543501ef98f2ecd95f8422cd23187e2153ed1cef66498eadcfb5c4b418fafd696198d5f1763d433945dd5c160a5e617291757ea39319
SSDEEP
49152:8R5rI3FRrQ2JTqyg+0uh4GShaPYHS5aDfJ8AHDPmoy7vKOsXPaaUJ:8RVI3FpQqTqyg+0ux1MfJzHDOoy7vKTG
Checks for missing Authenticode signature.
resource |
---|
39f609e59d6bbb9e705ae430de6eb6e92cee2e722d74f4369cc6ff7c601809a7.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CloseHandle
GetLastError
CreateThread
SuspendThread
OpenThread
GetFileAttributesA
FindFirstFileA
FindNextFileA
GetModuleHandleA
GetCurrentProcessId
GetWindowsDirectoryA
CreateNamedPipeA
ConnectNamedPipe
DisconnectNamedPipe
VirtualAlloc
GetCurrentProcess
CreateMutexA
OpenMutexA
ReleaseMutex
HeapFree
GetModuleHandleW
GetProcAddress
HeapAlloc
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SetLastError
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
ExitProcess
GetModuleHandleExW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
RtlUnwindEx
BsFIy52i
DllRegisterServer
FVHB61426r
HkaQGiJh
ZGH02
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ