ABqr1221
DIg314
DllRegisterServer
IRuBA
PkU848
Static task
static1
Behavioral task
behavioral1
Sample
41e0c02901f4ad04874574d3020eecc8b9d74c14840db1b10c18484de4713105.dll
Resource
win7-20241010-en
Target
41e0c02901f4ad04874574d3020eecc8b9d74c14840db1b10c18484de4713105.exe
Size
2.7MB
MD5
a907ba8832cb5814651c66643edff9cf
SHA1
5a1c30cdcb989385f9252c745c40e0e05ea2c6fd
SHA256
41e0c02901f4ad04874574d3020eecc8b9d74c14840db1b10c18484de4713105
SHA512
b7f3f63d765fe0ee8b29f09d9640115b2bdf7d90bae4dd1fc7ac02c03711ff57d854ca5a95719e49ee1b3f9df7e1763a893c522947b9e206a3e18b024a6625ab
SSDEEP
49152:q+RZDJ+z4/s2JdjcRZDIygMTy6unYr7lxXr9ITJaMabZHPQhvYrrcJa:qUMEEMjqDHg/6uY9ITJaMOH4hvYrA
Checks for missing Authenticode signature.
resource |
---|
41e0c02901f4ad04874574d3020eecc8b9d74c14840db1b10c18484de4713105.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetProcessHeap
CreateFileA
CloseHandle
GetLastError
CreateActCtxA
ActivateActCtx
DeactivateActCtx
LockFile
UnlockFile
ReleaseActCtx
GetCurrentThread
VirtualAlloc
HeapLock
HeapUnlock
ABqr1221
DIg314
DllRegisterServer
IRuBA
PkU848
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ