Exec
ExecToLog
ExecToStack
Static task
static1
Behavioral task
behavioral1
Sample
aa6252fc919d9277e2b53116a402c8948f4c9d077e6d5ea864b0311c08d10b41N.dll
Resource
win7-20240903-en
Target
aa6252fc919d9277e2b53116a402c8948f4c9d077e6d5ea864b0311c08d10b41N.exe
Size
115KB
MD5
3c543a327cac5113280ca972ce7390b0
SHA1
3da65d3cff525f0a93b7a4e8ebeaf655624013eb
SHA256
aa6252fc919d9277e2b53116a402c8948f4c9d077e6d5ea864b0311c08d10b41
SHA512
bddc39f92a3bf1450e07ec9e9196e9c593146a7ab4607ef4cc043a41b61727d2ddf19685d20a4d10be084d60e75a152bce4725ca4fd4937a2c42f34573efb4d7
SSDEEP
3072:nfo79dM9i3Kff/immNiwXFNxyJdZVkw8pMYecSdknQTSEP5:nfo7HM9iafHJmNiwXFGdnxDxbZ5
Checks for missing Authenticode signature.
resource |
---|
aa6252fc919d9277e2b53116a402c8948f4c9d077e6d5ea864b0311c08d10b41N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess
SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
Exec
ExecToLog
ExecToStack
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE