ServiceMain
mymain
Static task
static1
Behavioral task
behavioral1
Sample
sample.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
sample.dll
Resource
win10v2004-20220812-en
Target
sample.dll
Size
416KB
MD5
1c683d192170081317ee21ea1128797b
SHA1
7b652e352a6d2a511f226e4d0cc22f093e052ad8
SHA256
6a5f1cddd47fe01e37934bcd0815722e1c72f285c283da4c1ec4c57a110777bc
SHA512
5c973590a86788176f03c86ab6cb599ca0e29fe9a17918b32cb2bd48bf9304eb1453f65046f59c7ebab4c16d21578f2fc198f275a560d283750f2448272eca6b
SSDEEP
12288:Ar8qIkWG6aQwxrQGS0of5KZA9H4uptKS1LGZFl6mN/RUOhwhIK:X7TKSlgN/RUO1
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FreeConsole
GetSystemInfo
CreateThread
Module32FirstW
GetLocalTime
GetProcAddress
MoveFileExW
GetStartupInfoA
WTSGetActiveConsoleSessionId
GetComputerNameW
CreateProcessW
WideCharToMultiByte
GetTempFileNameW
CreateProcessA
GlobalMemoryStatus
GetTickCount
MoveFileW
FlushFileBuffers
EnterCriticalSection
FindNextFileA
LeaveCriticalSection
InitializeCriticalSection
DeleteFileW
DeleteCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
DecodePointer
HeapSize
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
IsValidCodePage
LoadLibraryA
TerminateThread
SetEvent
CreateEventW
SetFileAttributesW
GetACP
GetModuleHandleA
GetSystemDirectoryW
ReleaseMutex
WaitForSingleObject
CreateMutexW
GetTempPathW
PeekNamedPipe
SetFilePointer
SetErrorMode
CreatePipe
TerminateProcess
GetOEMCP
GetVolumeInformationW
ReadFile
VerifyVersionInfoW
GetProcessHeap
VerSetConditionMask
WriteFile
FileTimeToLocalFileTime
HeapAlloc
Process32FirstW
FileTimeToSystemTime
Process32NextW
GetLastError
MultiByteToWideChar
CreateToolhelp32Snapshot
OpenProcess
CreateFileW
LocalAlloc
lstrlenW
GetCurrentProcess
FindNextFileW
HeapFree
GetFileSizeEx
FindFirstFileW
CloseHandle
FindFirstFileExA
HeapReAlloc
GetCurrentThreadId
FindClose
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
LCMapStringW
GetFileType
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
RaiseException
InterlockedFlushSList
SetLastError
RtlUnwind
wsprintfW
PostThreadMessageW
wsprintfA
GetMessageW
OpenProcessToken
GetTokenInformation
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegOpenKeyA
ConvertSidToStringSidA
RegQueryValueExA
SetServiceStatus
DeleteService
RegisterServiceCtrlHandlerW
RegOpenKeyExW
OpenServiceW
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
CloseServiceHandle
OpenSCManagerW
GetSidSubAuthorityCount
GetSidSubAuthority
ControlService
StartServiceW
EnumServicesStatusW
GetUserNameW
DuplicateTokenEx
LookupAccountSidW
OpenServiceA
LookupAccountNameW
GetSidIdentifierAuthority
ord680
GetAdaptersInfo
NetWkstaGetInfo
PathFileExistsW
WinHttpOpen
WinHttpOpenRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpConnect
WTSQueryUserToken
closesocket
WSAStartup
listen
bind
accept
gethostname
gethostbyname
WSAGetLastError
htons
recv
connect
socket
shutdown
send
ServiceMain
mymain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ