svcready | b9bf1da1f7f1393bf0cd52d114695948966cca6d96ba7ea75ef93dea869b1c48

General

Target
b9bf1da1f7f1393bf0cd52d114695948966cca6d96ba7ea75ef93dea869b1c48
Size 580KB
Sample220802-hqcdkscbe8
SHA256 b9bf1da1f7f1393bf0cd52d114695948966cca6d96ba7ea75ef93dea869b1c48
MD5 4996d66bbab56a876179ee55dde4fc7e
SHA1 290925abbd06a5c78b7250fee1cc21ca7bbab547
SHA512 315bb61bd78f31441e4184daf6fac4cf347604c3d2da54776ffce52a893e1f3cc7484f667eeb1afe01380713749b273776c72cc9cf8bddc50b7d03bf7997d719
SSDEEP 12288:I+hod2fxvHcQhUwUSCfZBmAZgTWkUJXzh7f6H:I+hrv8Q0S2ZBX1kUJF7f6
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

svcready

Malware Config

Signatures

Detects SVCReady loader 1 IoCs

resource	yara_rule
sample	family_svcready

Svcready family
svcready

File Explorer

b9bf1da1f7f1393bf0cd52d114695948966cca6d96ba7ea75ef93dea869b1c48

.dll 580KB

b9bf1da1f7f1393bf0cd52d114695948966cca6d96ba7ea75ef93dea869b1c48

IMPHASH 4661689ad648304cfad7c2267b96734a
SHA256 b9bf1da1f7f1393bf0cd52d114695948966cca6d96ba7ea75ef93dea869b1c48
MD5 4996d66bbab56a876179ee55dde4fc7e
SHA1 290925abbd06a5c78b7250fee1cc21ca7bbab547
SHA512 315bb61bd78f31441e4184daf6fac4cf347604c3d2da54776ffce52a893e1f3cc7484f667eeb1afe01380713749b273776c72cc9cf8bddc50b7d03bf7997d719
SSDEEP 12288:I+hod2fxvHcQhUwUSCfZBmAZgTWkUJXzh7f6H:I+hrv8Q0S2ZBX1kUJF7f6
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Detects SVCReady loader

Minor OS version

Major OS version

Entry point

4560

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFree GetFileSize ExitProcess WriteFile MultiByteToWideChar GetModuleHandleExA GetModuleHandleW WideCharToMultiByte FormatMessageA UnmapViewOfFile CreateFileMappingA MapViewOfFile VirtualFree VirtualAlloc FreeLibrary GetProcAddress IsBadReadPtr VirtualProtectEx HeapSize WriteConsoleW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA FindClose SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocalTime CreateThread CloseHandle CreateFileA GetLastError Sleep GetCommandLineA GetModuleHandleA LocalAlloc WaitForSingleObject SetFilePointer OutputDebugStringA SetLastError GetFileType GetStdHandle GetACP GetModuleFileNameA GetModuleHandleExW CreateFileW ReadFile LoadLibraryExW RaiseException InterlockedFlushSList EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime EncodePointer DecodePointer LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess HeapAlloc HeapReAlloc HeapFree RtlUnwind

user32

KillTimer UpdateWindow GetCursorPos wsprintfA EndPaint GetMessageA DispatchMessageA LoadCursorA FillRect CreateWindowExW RegisterClassExW LoadStringW GetClientRect ShowWindow GetAsyncKeyState TranslateAcceleratorA SetTimer LoadAcceleratorsA DefWindowProcA SetLayeredWindowAttributes TranslateMessage SendMessageA LoadIconA BeginPaint

gdi32

Ellipse GetStockObject SelectObject

Sharing