_MainWndProc@16
_StubFileWrite@12
Static task
static1
Behavioral task
behavioral1
Sample
11192dcad45ed65a8a8368f3b1dff5a37d09ab3a0f01e14aa320ef653b1c50c4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11192dcad45ed65a8a8368f3b1dff5a37d09ab3a0f01e14aa320ef653b1c50c4.exe
Resource
win10v2004-20241007-en
Target
11192dcad45ed65a8a8368f3b1dff5a37d09ab3a0f01e14aa320ef653b1c50c4
Size
5.0MB
MD5
15db682ad7e3b655da6ea3f0c48b6a5a
SHA1
3d75bef9f63e3918fc66622d685c3860bae672ef
SHA256
11192dcad45ed65a8a8368f3b1dff5a37d09ab3a0f01e14aa320ef653b1c50c4
SHA512
95145aa29ed913f076cf9c138795337997f9b9d6921d5ac882e3c7b40109697683895bdfa94abef7dc62065c0bd93100ed372e90795668c2a35f69581853a867
SSDEEP
98304:Qc284eA0oitYbMhvV4rsJxz3YyeduV/t8IzvM41NABTnbzHxz2LkH3HjrK+YM9YE:Qc2cjykV4roDYyjV/pvX1NuTnXHxz2LI
Checks for missing Authenticode signature.
| resource |
|---|
| 11192dcad45ed65a8a8368f3b1dff5a37d09ab3a0f01e14aa320ef653b1c50c4 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
lstrcpyA
GetCommandLineA
SetErrorMode
lstrlenA
MulDiv
GetTempFileNameA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
FormatMessageA
lstrcatA
GetLastError
_lwrite
_llseek
GlobalUnlock
_lopen
GlobalAlloc
GlobalFree
_lclose
_lcreat
LoadLibraryA
GetProcAddress
FreeLibrary
OpenFile
GetVersionExA
GetCurrentProcess
WinExec
ExitProcess
_lread
LocalFree
GetTempPathA
GlobalLock
GetDC
BeginPaint
EndPaint
InvalidateRect
PostQuitMessage
SendMessageA
DefWindowProcA
GetClientRect
CreateWindowExA
DrawTextA
ReleaseDC
ShowWindow
SetWindowPos
UpdateWindow
SetTimer
LoadIconA
wsprintfA
MessageBoxA
ExitWindowsEx
RegisterClassA
LoadCursorA
DeleteObject
GetStockObject
GetDeviceCaps
PatBlt
CreateSolidBrush
TextOutA
SetTextColor
SetBkMode
SelectObject
StretchDIBits
CreateFontA
RealizePalette
SelectPalette
CreatePalette
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
_MainWndProc@16
_StubFileWrite@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ