__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
Uninstall.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Uninstall.exe
Resource
win10v2004-20241007-en
Target
Uninstall.exe.malware
Size
99KB
MD5
cfb0e5ff974e5fdefd8782af19f8e335
SHA1
951fbd266cb0af4322191412010464f6e898cb92
SHA256
cf13d502b62e2a118333b326fc0460336ceb0bc16ae59623ed6d183b5ce69852
SHA512
67f9a34c7cf378338fb62945d9005a594c8b1a78e4c89bf445d44b5bcc9b8d30b0296313226bd072cb62e847d6bde34a0d31dc7fc436d82e8a419bae24322803
SSDEEP
1536:JpaTdH5CVy9sP5gu+2oXU2kChHKTD+F73qyU5e9P4GkGgDkHCJlIz:JpaLx9m+hXU2kCdFD98DkHCJlI
Checks for missing Authenticode signature.
resource |
---|
Uninstall.exe.malware |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CoCreateInstance
OleInitialize
OleUninitialize
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CloseHandle
CompareStringA
CopyFileA
CreateDirectoryA
CreateFileA
CreateFileW
CreateProcessA
DeleteFileA
DeleteFileW
ExitProcess
FindResourceA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentVariableA
GetFileAttributesA
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTempPathA
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
IsDBCSLeadByte
LCMapStringA
LoadLibraryA
MoveFileA
MoveFileExA
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetFileAttributesA
SetFilePointer
SetHandleCount
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
CreateFontA
DeleteObject
SHChangeNotify
SHFileOperationA
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteA
SHGetPathFromIDListA
CheckDlgButton
DialogBoxParamA
EnableWindow
EndDialog
EnumThreadWindows
GetClassNameA
GetClientRect
GetDlgItem
GetParent
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowRect
GetWindowTextA
InvalidateRect
IsDlgButtonChecked
LoadIconA
LoadStringA
MessageBoxA
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetForegroundWindow
SetWindowLongA
SetWindowPos
SetWindowTextA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ