Rcard
Wcard
Static task
static1
Behavioral task
behavioral1
Sample
c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76.dll
Resource
win7-20240708-en
Target
c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76.exe
Size
136KB
MD5
a08fb5ca6d167095035a559c5f80a73c
SHA1
1e85d9e06b2e5e09fd41ef3448fd873b1005d592
SHA256
c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76
SHA512
07d2e7e250224ab0effdbcc9a39379c126e9cd050cbb1013dda6f924fd87a26e5f20c6442e01b19a712bc601889c81c7541e1b4df1e2e5df8739d0f9cf7f5324
SSDEEP
1536:1gmf5TfxYPfpoT/7ivK6Fr/E0odbbb2inHetkc5cqvnMg/WpRh70qQ4SDMTTtFVz:1rEnpofGTuXHHetkqcqvnhzduB
Checks for missing Authenticode signature.
resource |
---|
c9349e3cde70a1566d8df4c42e6a6b01a1189f6b4f25c7d7ffd692759a9cad76.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStdHandle
EscapeCommFunction
FlushFileBuffers
lstrcmpA
ReadFile
ClearCommError
GetTickCount
WriteFile
SetCommState
BuildCommDCBA
GetCommState
CreateFileA
lstrcatA
lstrcpyA
lstrlenA
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
CloseHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeA
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
HeapFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetAsyncKeyState
CharUpperA
Rcard
Wcard
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE