DeleteMatchOemFile
DrvProc
GetModulePath
IsDevicePresent
IsWow64
KillProc
VmCoInstaller
Static task
static1
Behavioral task
behavioral1
Sample
0d172b87f34464d47c68dbf0bd0e140dfedcdd0446b4bebfa1e6e7ede2426329N.dll
Resource
win7-20241010-en
Target
0d172b87f34464d47c68dbf0bd0e140dfedcdd0446b4bebfa1e6e7ede2426329N.exe
Size
184KB
MD5
44a1d40e20626914640c84e285b5b430
SHA1
3da60491545417d4f4af5115143069f91f7e9b1f
SHA256
0d172b87f34464d47c68dbf0bd0e140dfedcdd0446b4bebfa1e6e7ede2426329
SHA512
e937b0666dabf6d543cf5cddcc54aeeca97c461c9f37909beda22e438673d616d9dc1ec098ad00a0f02c48c55c5a645f5405afca75d3f9879593fd6f1e68de73
SSDEEP
3072:l1EJoMg76wQHQwtq7EqFr4XwRCs0ZiMcGsMC5KbO1:IBgGwQJtsEqtrwZiMdsZr
Checks for missing Authenticode signature.
resource |
---|
0d172b87f34464d47c68dbf0bd0e140dfedcdd0446b4bebfa1e6e7ede2426329N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
FreeLibrary
WritePrivateProfileStringA
FormatMessageA
DeleteFileA
GetWindowsDirectoryA
GetCurrentProcess
GetProcAddress
GetModuleHandleA
FindNextFileA
FindFirstFileA
ReadFile
GetFileSize
CreateFileA
OpenProcess
GetFullPathNameA
WinExec
TerminateProcess
CloseHandle
GetLastError
LocalFree
LocalAlloc
SetLastError
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
lstrlenW
LoadLibraryA
GlobalFree
FlushFileBuffers
SetFilePointer
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
HeapFree
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
LCMapStringA
LCMapStringW
HeapAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
IsWindow
FindWindowA
SendMessageA
FindWindowExA
RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
CommandLineToArgvW
GetModuleFileNameExA
EnumProcesses
SHDeleteKeyA
CM_Reenumerate_DevNode_Ex
CM_Locate_DevNode_ExA
SetupFindFirstLineA
SetupGetFieldCount
SetupGetStringFieldA
SetupFindNextLine
SetupCloseInfFile
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiRemoveDevice
SetupOpenInfFileA
SetupDiGetClassDevsA
DeleteMatchOemFile
DrvProc
GetModulePath
IsDevicePresent
IsWow64
KillProc
VmCoInstaller
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE