DeleteMatchOemFile
DrvProc
GetModulePath
IsDevicePresent
IsWow64
KillProc
VmCoInstaller
Static task
static1
Behavioral task
behavioral1
Sample
3413e857de07443d69c564d8b0778a4ff4f2577d951d52c7feb63a43839906bd.dll
Resource
win7-20240903-en
Target
3413e857de07443d69c564d8b0778a4ff4f2577d951d52c7feb63a43839906bd.exe
Size
184KB
MD5
439b79197746b474942074e76bcded1e
SHA1
2507368f48d39b40e23d6bb88378d35502156743
SHA256
3413e857de07443d69c564d8b0778a4ff4f2577d951d52c7feb63a43839906bd
SHA512
9d2fa5d20529f4603a4587e0e822629bdfeb4e401a0da85dd2c55a3b5090f6b77f6cdb6d938b0e84fc7d8730b90eb20b89495b61c5b4af0d7967c6a8c5891c7f
SSDEEP
3072:l1EJoMg76wQHQwtq7EqFr4XwRCs0ZiMcGsMC5KbO1+:IBgGwQJtsEqtrwZiMdsZrQ
Checks for missing Authenticode signature.
resource |
---|
3413e857de07443d69c564d8b0778a4ff4f2577d951d52c7feb63a43839906bd.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
FreeLibrary
WritePrivateProfileStringA
FormatMessageA
DeleteFileA
GetWindowsDirectoryA
GetCurrentProcess
GetProcAddress
GetModuleHandleA
FindNextFileA
FindFirstFileA
ReadFile
GetFileSize
CreateFileA
OpenProcess
GetFullPathNameA
WinExec
TerminateProcess
CloseHandle
GetLastError
LocalFree
LocalAlloc
SetLastError
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
lstrlenW
LoadLibraryA
GlobalFree
FlushFileBuffers
SetFilePointer
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
HeapFree
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
LCMapStringA
LCMapStringW
HeapAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
IsWindow
FindWindowA
SendMessageA
FindWindowExA
RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
CommandLineToArgvW
GetModuleFileNameExA
EnumProcesses
SHDeleteKeyA
CM_Reenumerate_DevNode_Ex
CM_Locate_DevNode_ExA
SetupFindFirstLineA
SetupGetFieldCount
SetupGetStringFieldA
SetupFindNextLine
SetupCloseInfFile
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiRemoveDevice
SetupOpenInfFileA
SetupDiGetClassDevsA
DeleteMatchOemFile
DrvProc
GetModulePath
IsDevicePresent
IsWow64
KillProc
VmCoInstaller
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE