Memories
Roses
Sos
Surrender
Static task
static1
Behavioral task
behavioral1
Sample
79f1292c3060aeb8a01089d9e976375018ff77bbd54d5d6b532f0fa7d9d96cde.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
79f1292c3060aeb8a01089d9e976375018ff77bbd54d5d6b532f0fa7d9d96cde.exe
Resource
win10v2004-20241007-en
Target
79f1292c3060aeb8a01089d9e976375018ff77bbd54d5d6b532f0fa7d9d96cde.exe
Size
557KB
MD5
400bf723364249fb4c9b685dc73e379f
SHA1
83d64194be548b46fd457ae338a770181680b4ef
SHA256
79f1292c3060aeb8a01089d9e976375018ff77bbd54d5d6b532f0fa7d9d96cde
SHA512
d5e85efcb18ba03fdd9a0c292e48a67003604b4ef722df925cfb8c0f52d01f64b3a70b19d859eb7d56b3b47762d840967f36fcd35555ebcf6386c25058bb8d1e
SSDEEP
12288:w1MZ2jSlp3mcO2JH1bWxR78NPicLLEHAb8BpQ4Ym0sEE03mi9kmc:w1RjC3DTI8NPnLLJ+pQ4YmZiHkmc
Checks for missing Authenticode signature.
resource |
---|
79f1292c3060aeb8a01089d9e976375018ff77bbd54d5d6b532f0fa7d9d96cde.exe |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExitProcess
GetModuleHandleExA
SetEndOfFile
HeapAlloc
InterlockedIncrement
CreateJobObjectW
SetConsoleScreenBufferSize
UnlockFile
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
GetConsoleAliasesA
GetCompressedFileSizeW
ReadConsoleOutputA
AddRefActCtx
GetLocaleInfoW
SizeofResource
GetFileAttributesA
GetTimeFormatW
GetAtomNameW
lstrcatA
FindNextVolumeMountPointW
CreateDirectoryA
ChangeTimerQueueTimer
GetProcAddress
HeapSize
FreeUserPhysicalPages
PrepareTape
GetModuleHandleA
SetFileAttributesW
LCMapStringW
CloseHandle
CreateFileW
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetModuleFileNameW
RaiseException
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
HeapValidate
IsBadReadPtr
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetLastError
HeapCreate
WriteFile
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapReAlloc
HeapQueryInformation
HeapFree
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
Memories
Roses
Sos
Surrender
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ