DllCanUnloadNowW
DllRegisterServerW
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
7c38de3f5cfde6b5aa87fb24f9101b274b48ad7b6b4f4b79b32f8e39d6c2f364.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c38de3f5cfde6b5aa87fb24f9101b274b48ad7b6b4f4b79b32f8e39d6c2f364.dll
Resource
win10v2004-20220812-en
Target
7c38de3f5cfde6b5aa87fb24f9101b274b48ad7b6b4f4b79b32f8e39d6c2f364
Size
31KB
MD5
5192dbceaa8a6c447f2baf1e72ef4427
SHA1
4381db40edf5856856a3cdfa5493e1494e530628
SHA256
7c38de3f5cfde6b5aa87fb24f9101b274b48ad7b6b4f4b79b32f8e39d6c2f364
SHA512
8d03bf9a8f4eca8fb742125e6e45cd814ac26417975cc5281742ada3e0158ba0c54487c4e67bb123861d5007505eb37168a0389ee4358abbf7099f2cf094dffa
SSDEEP
384:3chmHfcJyEJZ6/ZU3tw6A/ODeS7KZEu3JnzJls/uo:MU0JL6SwUeS7SE8zJl
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetSystemDirectoryA
GetTempPathA
HeapAlloc
GetProcessHeap
HeapFree
FreeLibrary
Sleep
GetModuleFileNameA
CloseHandle
OpenEventA
CreateThread
FreeConsole
Process32Next
Process32First
CreateToolhelp32Snapshot
LoadLibraryA
CreateEventA
GetProcAddress
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
GetStdHandle
WriteFile
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
SetServiceStatus
RegisterServiceCtrlHandlerW
DllCanUnloadNowW
DllRegisterServerW
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ