ServiceMain
mymain
Static task
static1
Behavioral task
behavioral1
Sample
run_export_entry.bat
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
run_export_entry.bat
Resource
win10v2004-20220812-en
Target
test.zip
Size
220KB
MD5
d1671e994cd96949c1fc2c0f5aa260cd
SHA1
4d57dfcb3ee0014ca57ce241df4f8089f4c240ca
SHA256
c367ec1ce579336cefe8641121af077f1d81333566a38577c32c17ceb342d300
SHA512
83aabde82bdfa73e56036fd9d76af972442eb2cc492aad38d98beda31ae4a5aa5fb38a39df4f956ee2b9c5ace61b33b261b4b86af3580d6f19e790307e38edc3
SSDEEP
6144:t5oqHXuNrLpOIkJMkU9oY71FsyKHJiEXMz5RjHZbdA12i:PkJOIMMkUNnsTphKddA1x
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FreeConsole
GetSystemInfo
CreateThread
Module32FirstW
GetLocalTime
GetProcAddress
MoveFileExW
GetStartupInfoA
WTSGetActiveConsoleSessionId
GetComputerNameW
CreateProcessW
WideCharToMultiByte
GetTempFileNameW
CreateProcessA
GlobalMemoryStatus
GetTickCount
MoveFileW
FlushFileBuffers
EnterCriticalSection
FindNextFileA
LeaveCriticalSection
InitializeCriticalSection
DeleteFileW
DeleteCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
DecodePointer
HeapSize
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
IsValidCodePage
LoadLibraryA
TerminateThread
SetEvent
CreateEventW
SetFileAttributesW
GetACP
GetModuleHandleA
GetSystemDirectoryW
ReleaseMutex
WaitForSingleObject
CreateMutexW
GetTempPathW
PeekNamedPipe
SetFilePointer
SetErrorMode
CreatePipe
TerminateProcess
GetOEMCP
GetVolumeInformationW
ReadFile
VerifyVersionInfoW
GetProcessHeap
VerSetConditionMask
WriteFile
FileTimeToLocalFileTime
HeapAlloc
Process32FirstW
FileTimeToSystemTime
Process32NextW
GetLastError
MultiByteToWideChar
CreateToolhelp32Snapshot
OpenProcess
CreateFileW
LocalAlloc
lstrlenW
GetCurrentProcess
FindNextFileW
HeapFree
GetFileSizeEx
FindFirstFileW
CloseHandle
FindFirstFileExA
HeapReAlloc
GetCurrentThreadId
FindClose
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
LCMapStringW
GetFileType
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
RaiseException
InterlockedFlushSList
SetLastError
RtlUnwind
wsprintfW
PostThreadMessageW
wsprintfA
GetMessageW
OpenProcessToken
GetTokenInformation
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegOpenKeyA
ConvertSidToStringSidA
RegQueryValueExA
SetServiceStatus
DeleteService
RegisterServiceCtrlHandlerW
RegOpenKeyExW
OpenServiceW
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
CloseServiceHandle
OpenSCManagerW
GetSidSubAuthorityCount
GetSidSubAuthority
ControlService
StartServiceW
EnumServicesStatusW
GetUserNameW
DuplicateTokenEx
LookupAccountSidW
OpenServiceA
LookupAccountNameW
GetSidIdentifierAuthority
ord680
GetAdaptersInfo
NetWkstaGetInfo
PathFileExistsW
WinHttpOpen
WinHttpOpenRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpConnect
WTSQueryUserToken
closesocket
WSAStartup
listen
bind
accept
gethostname
gethostbyname
WSAGetLastError
htons
recv
connect
socket
shutdown
send
ServiceMain
mymain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ